<html>
    <head>
      <base href="https://bugs.freedesktop.org/" />
    </head>
    <body>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_REOPENED "
   title="REOPENED - Crash on shutdown, Assertion 'a >= 0 && a < _JOB_TYPE_MAX_MERGING' failed"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=67427#c19">Comment # 19</a>
              on <a class="bz_bug_link 
          bz_status_REOPENED "
   title="REOPENED - Crash on shutdown, Assertion 'a >= 0 && a < _JOB_TYPE_MAX_MERGING' failed"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=67427">bug 67427</a>
              from <span class="vcard"><a class="email" href="mailto:steven@uplinklabs.net" title="Steven Noonan <steven@uplinklabs.net>"> <span class="fn">Steven Noonan</span></a>
</span></b>
        <pre>Created <span class=""><a href="attachment.cgi?id=109380" name="attach_109380" title="debug build coredump">attachment 109380</a> <a href="attachment.cgi?id=109380&action=edit" title="debug build coredump">[details]</a></span>
debug build coredump

Here's a debug build (-O0 -g) with the same crash. I've got a fairly solid
repro now, just have to reboot my router box and when it comes back this system
crashes.

Better stack trace follows:

(gdb) thread apply all bt full

Thread 1 (Thread 0x7f5b1bb527c0 (LWP 13326)):
#0  0x00007f5b1ab110c9 in raise () from /usr/lib/libpthread.so.0
No symbol table info available.
#1  0x00007f5b1bbc9a53 in crash (sig=6) at src/core/main.c:168
        rl = {
          rlim_cur = 18446744073709551615, 
          rlim_max = 18446744073709551615
        }
        sa = {
          __sigaction_handler = {
            sa_handler = 0x0, 
            sa_sigaction = 0x0
          }, 
          sa_mask = {
            __val = {0 <repeats 16 times>}
          }, 
          sa_flags = 0, 
          sa_restorer = 0x0
        }
        pid = 0
        __func__ = "crash"
        __PRETTY_FUNCTION__ = "crash"
#2  <signal handler called>
No symbol table info available.
#3  0x00007f5b1a791967 in raise () from /usr/lib/libc.so.6
No symbol table info available.
#4  0x00007f5b1a792d3a in abort () from /usr/lib/libc.so.6
No symbol table info available.
#5  0x00007f5b1bc499fe in log_assert_failed (text=0x7f5b1bd082b8 "a >= 0 && a <
_JOB_TYPE_MAX_MERGING", file=0x7f5b1bd08023 "src/core/job.c", line=314,
func=0x7f5b1bd08ae0 <__PRETTY_FUNCTION__.13893> "job_type_lookup_merge") at
src/shared/log.c:718
No locals.
#6  0x00007f5b1bcaab15 in job_type_lookup_merge (a=_JOB_TYPE_MAX_MERGING,
b=JOB_RESTART) at src/core/job.c:314
        __PRETTY_FUNCTION__ = "job_type_lookup_merge"
#7  0x00007f5b1bbda1c3 in job_type_is_superset (a=_JOB_TYPE_MAX_MERGING,
b=JOB_RESTART) at src/core/job.h:198
No locals.
#8  0x00007f5b1bbdba67 in transaction_is_destructive (tr=0x7f5b1c484e50,
mode=JOB_FAIL, e=0x7fff60c9dd60) at src/core/transaction.c:516
        i = 0xffffffffffffffff
        j = 0x7f5b1c548a90
        __PRETTY_FUNCTION__ = "transaction_is_destructive"
#9  0x00007f5b1bbdc31e in transaction_activate (tr=0x7f5b1c484e50,
m=0x7f5b1c46a370, mode=JOB_FAIL, e=0x7fff60c9dd60) at
src/core/transaction.c:722
        i = 0xffffffffffffffff
        j = 0x0
        r = 0
        generation = 3
        __PRETTY_FUNCTION__ = "transaction_activate"
        __func__ = "transaction_activate"
#10 0x00007f5b1bbd3587 in manager_add_job (m=0x7f5b1c46a370,
type=_JOB_TYPE_MAX_MERGING, unit=0x7f5b1c51cf40, mode=JOB_FAIL, override=true,
e=0x7fff60c9dd60, _ret=0x7fff60c9dbd0) at src/core/manager.c:1224
        r = 0
        tr = 0x7f5b1c484e50
        __PRETTY_FUNCTION__ = "manager_add_job"
        __func__ = "manager_add_job"
#11 0x00007f5b1bc19ca9 in bus_unit_queue_job (bus=0x7f5b1c47cfc0,
message=0x7f5b1c549010, u=0x7f5b1c51cf40, type=_JOB_TYPE_MAX_IN_TRANSACTION,
mode=JOB_FAIL, reload_if_possible=false, error=0x7fff60c9dd60) at
src/core/dbus-unit.c:777
        path = 0x0
        j = 0x7f5b1c46a790
        r = 0
        __PRETTY_FUNCTION__ = "bus_unit_queue_job"
#12 0x00007f5b1bc18b54 in bus_unit_method_start_generic (bus=0x7f5b1c47cfc0,
message=0x7f5b1c549010, u=0x7f5b1c51cf40,
job_type=_JOB_TYPE_MAX_IN_TRANSACTION, reload_if_possible=false,
error=0x7fff60c9dd60) at src/core/dbus-unit.c:383
        smode = 0x7f5b1c484f58 "fail"
        mode = JOB_FAIL
        r = 1
        __PRETTY_FUNCTION__ = "bus_unit_method_start_generic"
#13 0x00007f5b1bc12745 in method_start_unit_generic (bus=0x7f5b1c47cfc0,
message=0x7f5b1c549010, m=0x7f5b1c46a370,
job_type=_JOB_TYPE_MAX_IN_TRANSACTION, reload_if_possible=false,
error=0x7fff60c9dd60) at src/core/dbus-manager.c:478
        name = 0x7f5b1c484f44 "nscd.service"
        u = 0x7f5b1c51cf40
        r = 1
        __PRETTY_FUNCTION__ = "method_start_unit_generic"
#14 0x00007f5b1bc12899 in method_try_restart_unit (bus=0x7f5b1c47cfc0,
message=0x7f5b1c549010, userdata=0x7f5b1c46a370, error=0x7fff60c9dd60) at
src/core/dbus-manager.c:498
No locals.
#15 0x00007f5b1bc81167 in method_callbacks_run (bus=0x7f5b1c47cfc0,
m=0x7f5b1c549010, c=0x7f5b1c4854b0, require_fallback=false,
found_object=0x7fff60c9de83) at src/libsystemd/sd-bus/bus-objects.c:400
        slot = 0x7f5b1c53c4b0
        error = {
          name = 0x0, 
          message = 0x0, 
          _need_free = 0
        }
        signature = 0x7f5b1c476690 "ss"
        u = 0x7f5b1c46a370
        r = 1
        __PRETTY_FUNCTION__ = "method_callbacks_run"
#16 0x00007f5b1bc83901 in object_find_and_run (bus=0x7f5b1c47cfc0,
m=0x7f5b1c549010, p=0x7f5b1c484ea8 "/org/freedesktop/systemd1",
require_fallback=false, found_object=0x7fff60c9de83) at
src/libsystemd/sd-bus/bus-objects.c:1224
        n = 0x7f5b1c548e10
        vtable_key = {
          path = 0x7f5b1c484ea8 "/org/freedesktop/systemd1", 
          interface = 0x7f5b1c484ee8 "org.freedesktop.systemd1.Manager", 
          member = 0x7f5b1c484ed0 "TryRestartUnit", 
          parent = 0x8c777b69f5dd8c00, 
          last_iteration = 0, 
          vtable = 0x7f5b1bbc95d3 <_start>
        }
        v = 0x7f5b1c4854b0
        r = 0
        __PRETTY_FUNCTION__ = "object_find_and_run"
#17 0x00007f5b1bc83f33 in bus_process_object (bus=0x7f5b1c47cfc0,
m=0x7f5b1c549010) at src/libsystemd/sd-bus/bus-objects.c:1340
        prefix = <error reading variable prefix (frame address is not
available.)>
        r = 32603
        pl = 25
        found_object = true
        __PRETTY_FUNCTION__ = "bus_process_object"
#18 0x00007f5b1bc91239 in process_message (bus=0x7f5b1c47cfc0,
m=0x7f5b1c549010) at src/libsystemd/sd-bus/sd-bus.c:2409
        r = 0
        __PRETTY_FUNCTION__ = "process_message"
        __func__ = "process_message"
#19 0x00007f5b1bc9140e in process_running (bus=0x7f5b1c47cfc0,
hint_priority=false, priority=0, ret=0x0) at
src/libsystemd/sd-bus/sd-bus.c:2451
        m = 0x7f5b1c549010
        r = 1
        __PRETTY_FUNCTION__ = "process_running"
        __func__ = "process_running"
#20 0x00007f5b1bc91c50 in bus_process_internal (bus=0x7f5b1c47cfc0,
hint_priority=false, priority=0, ret=0x0) at
src/libsystemd/sd-bus/sd-bus.c:2640
        _dont_destroy_bus = 0x7f5b1c47cfc0
        r = 32603
        __PRETTY_FUNCTION__ = "bus_process_internal"
#21 0x00007f5b1bc91d21 in sd_bus_process (bus=0x7f5b1c47cfc0, ret=0x0) at
src/libsystemd/sd-bus/sd-bus.c:2659
No locals.
#22 0x00007f5b1bc924bd in io_callback (s=0x7f5b1c46b000, fd=19, revents=1,
userdata=0x7f5b1c47cfc0) at src/libsystemd/sd-bus/sd-bus.c:2918
        bus = 0x7f5b1c47cfc0
        r = 32767
        __PRETTY_FUNCTION__ = "io_callback"
#23 0x00007f5b1bc987c4 in source_dispatch (s=0x7f5b1c46b000) at
src/libsystemd/sd-event/sd-event.c:2103
        r = 0
        __PRETTY_FUNCTION__ = "source_dispatch"
        __func__ = "source_dispatch"
#24 0x00007f5b1bc99b44 in sd_event_dispatch (e=0x7f5b1c46ab10) at
src/libsystemd/sd-event/sd-event.c:2460
        p = 0x7f5b1c46b000
        r = 32767
        __PRETTY_FUNCTION__ = "sd_event_dispatch"
#25 0x00007f5b1bc99cd5 in sd_event_run (e=0x7f5b1c46ab10,
timeout=18446744073709551615) at src/libsystemd/sd-event/sd-event.c:2489
        r = 1
        __PRETTY_FUNCTION__ = "sd_event_run"
#26 0x00007f5b1bbd5ee9 in manager_loop (m=0x7f5b1c46a370) at
src/core/manager.c:2010
        wait_usec = 18446744073709551615
        r = 1
        rl = {
          interval = 1000000, 
          begin = 37569410558, 
          burst = 50000, 
          num = 26
        }
        __PRETTY_FUNCTION__ = "manager_loop"
        __func__ = "manager_loop"
#27 0x00007f5b1bbceb93 in main (argc=4, argv=0x7fff60c9e468) at
src/core/main.c:1731
        m = 0x7f5b1c46a370
        r = 0
        retval = 1
        before_startup = 37382632984
        after_startup = 0
        timespan =
"\004\000\000\000\000\000\000\000\240\343\311`\377\177\000\000\330t\265\033[\177\000\000\000\000\000\000\000\000\000\000\002\000\000\000\300\237\000\000\r\206\315\033[\177\000\000\302",
'\000' <repeats 14 times>
        fds = 0x0
        reexecute = false
        shutdown_verb = 0x0
        initrd_timestamp = {
          realtime = 0, 
          monotonic = 0
        }
        userspace_timestamp = {
          realtime = 1415856026408304, 
          monotonic = 37382632434
        }
        kernel_timestamp = {
          realtime = 1415818643775870, 
          monotonic = 0
        }
        security_start_timestamp = {
          realtime = 0, 
          monotonic = 0
        }
        security_finish_timestamp = {
          realtime = 0, 
          monotonic = 0
        }
        systemd = "systemd"
        skip_setup = true
        j = 32767
        loaded_policy = false
        arm_reboot_watchdog = false
        queue_default_job = false
        empty_etc = false
        switch_root_dir = 0x0
        switch_root_init = 0x0
        saved_rlimit_nofile = {
          rlim_cur = 1024, 
          rlim_max = 4096
        }
        __func__ = "main"
        __PRETTY_FUNCTION__ = "main"</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the QA Contact for the bug.</li>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>