<html>
    <head>
      <base href="https://bugs.freedesktop.org/" />
    </head>
    <body><span class="vcard"><a class="email" href="mailto:steven@uplinklabs.net" title="Steven Noonan <steven@uplinklabs.net>"> <span class="fn">Steven Noonan</span></a>
</span> changed
              <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Crash on shutdown, Assertion 'a >= 0 && a < _JOB_TYPE_MAX_MERGING' failed"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=67427">bug 67427</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">CC</td>
           <td>
                
           </td>
           <td>steven@uplinklabs.net
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Crash on shutdown, Assertion 'a >= 0 && a < _JOB_TYPE_MAX_MERGING' failed"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=67427#c17">Comment # 17</a>
              on <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Crash on shutdown, Assertion 'a >= 0 && a < _JOB_TYPE_MAX_MERGING' failed"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=67427">bug 67427</a>
              from <span class="vcard"><a class="email" href="mailto:steven@uplinklabs.net" title="Steven Noonan <steven@uplinklabs.net>"> <span class="fn">Steven Noonan</span></a>
</span></b>
        <pre>Created <span class=""><a href="attachment.cgi?id=109372" name="attach_109372" title="gzipped core dump from systemd 217">attachment 109372</a> <a href="attachment.cgi?id=109372&action=edit" title="gzipped core dump from systemd 217">[details]</a></span>
gzipped core dump from systemd 217

I'm encountering this as well on systemd 217.

Nov 12 08:01:01 dispater crond[12331]: pam_unix(crond:session): session opened
for user root by (uid=0)
Nov 12 08:01:01 dispater CROND[12332]: (root) CMD (run-parts /etc/cron.hourly)
Nov 12 08:01:01 dispater CROND[12331]: pam_unix(crond:session): session closed
for user root
Nov 12 08:03:37 dispater dhcpcd[1075]: br0: fe80::2472:37ff:fea0:49d2 is
unreachable, expiring it
Nov 12 08:05:03 dispater dhcpcd[1075]: br0: Router Advertisement from
fe80::9844:a4ff:fe69:acd5
Nov 12 08:05:03 dispater dhcpcd[1075]: br0: adding address
2002:6898:6b85:beef:6a05:caff:fe0a:6ec2/64
Nov 12 08:05:03 dispater systemd[1]: Cannot add dependency job for unit
cups.socket, ignoring: Unit cups.socket failed to load: No such file or
directory.
Nov 12 08:05:03 dispater systemd[1]: Stopping Name Service Cache Daemon...
Nov 12 08:05:03 dispater systemd[1]: Assertion 'a >= 0 && a <
_JOB_TYPE_MAX_MERGING' failed at src/core/job.c:314, function
job_type_lookup_merge(). Aborting.
Nov 12 08:05:03 dispater systemd[1]: Caught <ABRT>, dumped core as pid 12419.
Nov 12 08:05:03 dispater systemd[1]: Freezing execution.
Nov 12 08:05:03 dispater systemd-coredump[12420]: Process 12419 (systemd) of
user 0 dumped core.
Nov 12 08:05:08 dispater acpid[554]: client 608[0:0] has disconnected
Nov 12 08:05:08 dispater acpid[554]: client connected from 653[82:82]
Nov 12 08:05:08 dispater acpid[554]: 1 client rule loaded

After the above point I can't log in or do anything useful with the box except
reboot it.

Backtrace via 'coredumpctl gdb':

(gdb) thread apply all bt full

Thread 1 (Thread 0x7f1fa9967780 (LWP 12419)):
#0  0x00007f1fa89260c9 in raise () from /usr/lib/libpthread.so.0
No symbol table info available.
#1  0x00007f1fa9a5b3c8 in crash.lto_priv.222 (sig=6) at src/core/main.c:168
        rl = {
          rlim_cur = 18446744073709551615, 
          rlim_max = 18446744073709551615
        }
        sa = {
          __sigaction_handler = {
            sa_handler = 0x0, 
            sa_sigaction = 0x0
          }, 
          sa_mask = {
            __val = {0 <repeats 16 times>}
          }, 
          sa_flags = 0, 
          sa_restorer = 0x0
        }
        __func__ = "crash"
        __PRETTY_FUNCTION__ = "crash"
#2  <signal handler called>
No symbol table info available.
#3  0x00007f1fa85a6967 in raise () from /usr/lib/libc.so.6
No symbol table info available.
#4  0x00007f1fa85a7d3a in abort () from /usr/lib/libc.so.6
No symbol table info available.
#5  0x00007f1fa9a90012 in log_assert_failed (text=text@entry=0x7f1fa9aa78b8 "a
<span class="quote">>= 0 && a < _JOB_TYPE_MAX_MERGING", file=file@entry=0x7f1fa9a9a212</span >
"src/core/job.c", line=line@entry=314, func=func@entry=0x7f1fa9ab8370
<__PRETTY_FUNCTION__.15000> "job_type_lookup_merge") at src/shared/log.c:718
No locals.
#6  0x00007f1fa99e943f in job_type_lookup_merge (a=<optimized out>,
b=<optimized out>) at src/core/job.c:314
        __PRETTY_FUNCTION__ = "job_type_lookup_merge"
#7  0x00007f1fa9a330a5 in job_type_is_superset () at src/core/job.h:198
No locals.
#8  transaction_is_destructive (e=<optimized out>, mode=<optimized out>,
tr=<optimized out>) at src/core/transaction.c:516
        i = 0xffffffffffffffff
        j = 0x0
#9  transaction_activate (e=<optimized out>, mode=<optimized out>, m=<optimized
out>, tr=<optimized out>) at src/core/transaction.c:722
        i = 0xffffffffffffffff
        j = 0x0
#10 manager_add_job (m=0x7f1fab518380, type=_JOB_TYPE_MAX_MERGING, unit=0x6,
mode=_JOB_MODE_INVALID, override=false, e=0x7f1fa9b07180 <buffer>,
_ret=0x7fff46a422b0) at src/core/manager.c:1224
        __PRETTY_FUNCTION__ = "manager_add_job"
        __func__ = "manager_add_job"
#11 0x00007f1fa9a1bbc5 in bus_unit_queue_job (bus=0x7f1fab5f9090,
message=0x7f1fab66dd20, u=0x7f1fab5b5820, type=_JOB_TYPE_MAX_IN_TRANSACTION,
mode=JOB_FAIL, reload_if_possible=128, error=0x7fff46a42440) at
src/core/dbus-unit.c:777
        path = 0x6 <error: Cannot access memory at address 0x6>
        j = 0x1ced597e673294c1
        __PRETTY_FUNCTION__ = "bus_unit_queue_job"
#12 0x00007f1fa9a1bfe6 in bus_unit_method_start_generic (bus=0x7f1fab5f9090,
message=0x7f1fab66dd20, u=0x7f1fab5b5820,
job_type=_JOB_TYPE_MAX_IN_TRANSACTION,
reload_if_possible=reload_if_possible@entry=false, error=0x7fff46a42440) at
src/core/dbus-unit.c:383
        smode = 0x7f1fab6059f8 "fail"
        mode = JOB_FAIL
        r = 0
        __PRETTY_FUNCTION__ = "bus_unit_method_start_generic"
#13 0x00007f1fa9a756c6 in method_start_unit_generic (bus=0x7f1fab5f9090,
message=0x7f1fab66dd20, m=0x7f1fab518380,
job_type=_JOB_TYPE_MAX_IN_TRANSACTION, reload_if_possible=<optimized out>,
error=0x7fff46a42440) at src/core/dbus-manager.c:478
        name = 0x7f1fab6059e4 "nscd.service"
        u = 0x7f1fab5b5820
        r = <optimized out>
        __PRETTY_FUNCTION__ = "method_start_unit_generic"
#14 0x00007f1fa9a6b3ee in method_callbacks_run (found_object=<optimized out>,
require_fallback=<optimized out>, c=<optimized out>, m=<optimized out>,
bus=<optimized out>) at src/libsystemd/sd-bus/bus-objects.c:400
        slot = 0x0
        u = 0x7f1fab518380
        error = {
          name = 0x0, 
          message = 0x0, 
          _need_free = 0
        }
        signature = 0xffffffffffffffff <error: Cannot access memory at address
0xffffffffffffffff>
#15 object_find_and_run.lto_priv.239 (bus=0x7f1fab5f9090, m=0x7f1fab66dd20,
p=0x6 <error: Cannot access memory at address 0x6>, require_fallback=false,
found_object=0x7fff46a425b0) at src/libsystemd/sd-bus/bus-objects.c:1224
        vtable_key = {
          path = 0x7f1fab605948 "/org/freedesktop/systemd1", 
          interface = 0x7f1fab605988 "org.freedesktop.systemd1.Manager", 
          member = 0x7f1fab605970 "TryRestartUnit", 
          parent = 0x1, 
          last_iteration = 0, 
          vtable = 0x7f1fa9a848e1 <bus_read_message.constprop.160+49>
        }
        __PRETTY_FUNCTION__ = "object_find_and_run"
#16 0x00007f1fa9a85ace in bus_process_object (m=<optimized out>,
bus=0x7f1fab5f9090) at src/libsystemd/sd-bus/bus-objects.c:1340
        prefix = 0x7fff46a424e0 "\220\220_\253\037\177"
        r = <optimized out>
        pl = <optimized out>
        found_object = true
#17 process_message (m=<optimized out>, bus=0x7f1fab5f9090) at
src/libsystemd/sd-bus/sd-bus.c:2409
        r = <optimized out>
#18 process_running (priority=0, ret=0x0, hint_priority=false,
bus=0x7f1fab5f9090) at src/libsystemd/sd-bus/sd-bus.c:2451
        m = <optimized out>
        r = <optimized out>
#19 bus_process_internal.constprop.164 (bus=0x7f1fab5f9090, ret=0x0,
priority=0, hint_priority=false) at src/libsystemd/sd-bus/sd-bus.c:2640
        _dont_destroy_bus = 0x7f1fab5f9090
#20 0x00007f1fa9a23b11 in sd_bus_process (ret=0x0, bus=<optimized out>) at
src/libsystemd/sd-bus/sd-bus.c:2659
No locals.
#21 io_callback (s=<optimized out>, fd=<optimized out>, revents=<optimized
out>, userdata=<optimized out>) at src/libsystemd/sd-bus/sd-bus.c:2918
        bus = <optimized out>
        __PRETTY_FUNCTION__ = "io_callback"
#22 0x00007f1fa9a4e680 in source_dispatch (s=0x7f1fab607ee0) at
src/libsystemd/sd-event/sd-event.c:2103
        __PRETTY_FUNCTION__ = "source_dispatch"
        __func__ = "source_dispatch"
#23 0x00007f1fa9a53bde in sd_event_dispatch (e=0x7f1fab5187b0) at
src/libsystemd/sd-event/sd-event.c:2460
        p = <optimized out>
        r = <optimized out>
        e = 0x7f1fab5187b0
        __PRETTY_FUNCTION__ = "sd_event_dispatch"
#24 0x00007f1fa9a66590 in sd_event_run (timeout=<optimized out>, e=<optimized
out>) at src/libsystemd/sd-event/sd-event.c:2489
        r = 0
#25 manager_loop (m=0x7f1fab518380) at src/core/manager.c:2010
        wait_usec = 18446744073709551615
        rl = {
          interval = 1000000, 
          begin = 389870461922, 
          burst = 50000, 
          num = 23
        }
        __PRETTY_FUNCTION__ = "manager_loop"
        __func__ = "manager_loop"
#26 0x00007f1fa99e6859 in main (argc=1, argv=0x7fff46a43098) at
src/core/main.c:1731
        m = 0x7f1fab518380
        r = <optimized out>
        retval = 1
        before_startup = <optimized out>
        after_startup = <optimized out>
        timespan =
"\000\000\000\000\000\000\000\000`.\244F\377\177\000\000X.\244F\377\177\000\000W.\244F\377\177\000\000P\213z\251\037\177\000\000h.\244F\377\177\000\000\000\000\000\000\034\000\000\000`.\244F\377\177\000"
        fds = 0x0
        reexecute = false
        shutdown_verb = 0x0
        initrd_timestamp = <optimized out>
        userspace_timestamp = {
          realtime = 1415418435002172, 
          monotonic = 3175634
        }
        kernel_timestamp = {
          realtime = <optimized out>, 
          monotonic = 0
        }
        security_start_timestamp = {
          realtime = 1415418435003792, 
          monotonic = 3177255
        }
        security_finish_timestamp = {
          realtime = 1415418435004168, 
          monotonic = 3177631
        }
        systemd = "systemd"
        skip_setup = <optimized out>
        j = <optimized out>
        loaded_policy = false
        arm_reboot_watchdog = false
        queue_default_job = <optimized out>
        empty_etc = false
        switch_root_dir = 0x0
        switch_root_init = 0x0
        __func__ = "main"
        __PRETTY_FUNCTION__ = "main"
(gdb)

Attaching a core dump.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the QA Contact for the bug.</li>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>