[systemd-bugs] [Bug 67427] Crash on shutdown, Assertion 'a >= 0 && a < _JOB_TYPE_MAX_MERGING' failed

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Thu Nov 27 10:46:01 PST 2014


https://bugs.freedesktop.org/show_bug.cgi?id=67427

rmlipman at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rmlipman at gmail.com

--- Comment #22 from rmlipman at gmail.com ---
Created attachment 110146
  --> https://bugs.freedesktop.org/attachment.cgi?id=110146&action=edit
systemd 317 -g core dump (not -O0)

I get a similar crash, but instead of on shutdown, it happens either at random
or on boot.

Trace for my situation follows:

(gdb) thread apply all bt full

Thread 1 (Thread 0x7f0a24a337c0 (LWP 593)):
#0  0x00007f0a23c070c9 in raise () from /usr/lib/libpthread.so.0
No symbol table info available.
#1  0x00007f0a24b1eeb8 in crash.lto_priv.222 (sig=6) at src/core/main.c:168
        rl = {rlim_cur = 18446744073709551615, rlim_max = 18446744073709551615}
        sa = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, 
          sa_mask = {__val = {0 <repeats 16 times>}}, sa_flags = 0, 
          sa_restorer = 0x0}
        __func__ = "crash"
        __PRETTY_FUNCTION__ = "crash"
#2  <signal handler called>
No symbol table info available.
#3  0x00007f0a23887967 in raise () from /usr/lib/libc.so.6
No symbol table info available.
#4  0x00007f0a23888d3a in abort () from /usr/lib/libc.so.6
No symbol table info available.
#5  0x00007f0a24b4dee2 in log_assert_failed (
    text=text at entry=0x7f0a24b65760 "a >= 0 && a < _JOB_TYPE_MAX_MERGING", 
    file=file at entry=0x7f0a24b580c0 "src/core/job.c", line=line at entry=314, 
    func=func at entry=0x7f0a24b76170 <__PRETTY_FUNCTION__.14671>
"job_type_lookup_merge") at src/shared/log.c:718
No locals.
#6  0x00007f0a24aa756f in job_type_lookup_merge (a=<optimized out>, 
    b=<optimized out>) at src/core/job.c:314
        __PRETTY_FUNCTION__ = "job_type_lookup_merge"
#7  0x00007f0a24b21825 in job_type_is_superset () at src/core/job.h:198
No locals.
#8  transaction_is_destructive (e=<optimized out>, mode=<optimized out>, 
    tr=<optimized out>) at src/core/transaction.c:516
        i = 0xffffffffffffffff
        j = 0x0
#9  transaction_activate (e=<optimized out>, mode=<optimized out>, 
    m=<optimized out>, tr=<optimized out>) at src/core/transaction.c:722
        i = 0xffffffffffffffff
        j = 0x0
#10 manager_add_job (m=0x7f0a26420380, type=_JOB_TYPE_MAX_MERGING, unit=0x6, 
    mode=_JOB_MODE_INVALID, override=false, e=0x1, _ret=0x7fff32c31fb0)
    at src/core/manager.c:1224
        __PRETTY_FUNCTION__ = "manager_add_job"
        __func__ = "manager_add_job"
#11 0x00007f0a24acd015 in bus_unit_queue_job (bus=0x7f0a26434b90, 
    message=0x7f0a26504ae0, u=0x7f0a264cb770, 
    type=_JOB_TYPE_MAX_IN_TRANSACTION, mode=JOB_FAIL, reload_if_possible=true, 
    error=0x7fff32c32140) at src/core/dbus-unit.c:777
        path = 0x6 <error: Cannot access memory at address 0x6>
        j = 0x4b33a1ae32564764
        __PRETTY_FUNCTION__ = "bus_unit_queue_job"
#12 0x00007f0a24acd436 in bus_unit_method_start_generic (bus=0x7f0a26434b90, 
    message=0x7f0a26504ae0, u=0x7f0a264cb770, 
    job_type=_JOB_TYPE_MAX_IN_TRANSACTION, 
    reload_if_possible=reload_if_possible at entry=false, error=0x7fff32c32140)
    at src/core/dbus-unit.c:383
        smode = 0x7f0a265011d8 "fail"
        mode = JOB_FAIL
        r = 0
        __PRETTY_FUNCTION__ = "bus_unit_method_start_generic"
#13 0x00007f0a24b3df56 in method_start_unit_generic (bus=0x7f0a26434b90, 
    message=0x7f0a26504ae0, m=0x7f0a26420380, 
    job_type=_JOB_TYPE_MAX_IN_TRANSACTION, reload_if_possible=<optimized out>, 
    error=0x7fff32c32140) at src/core/dbus-manager.c:478
        name = 0x7f0a265011c4 "dnsmasq.service"
        u = 0x7f0a264cb770
        r = <optimized out>
        __PRETTY_FUNCTION__ = "method_start_unit_generic"
#14 0x00007f0a24b2df8e in method_callbacks_run (found_object=<optimized out>, 
    require_fallback=<optimized out>, c=<optimized out>, m=<optimized out>, 
    bus=<optimized out>) at src/libsystemd/sd-bus/bus-objects.c:400
        slot = 0x0
        u = 0x7f0a26420380
        error = {name = 0x0, message = 0x0, _need_free = 0}
        signature = 0xffffffffffffffff <error: Cannot access memory at address
0xffffffffffffffff>
#15 object_find_and_run.lto_priv.239 (bus=0x7f0a26434b90, m=0x7f0a26504ae0, 
    p=0x6 <error: Cannot access memory at address 0x6>, 
    require_fallback=false, found_object=0x7fff32c322b0)
    at src/libsystemd/sd-bus/bus-objects.c:1224
        vtable_key = {path = 0x7f0a26501128 "/org/freedesktop/systemd1", 
          interface = 0x7f0a26501168 "org.freedesktop.systemd1.Manager", 
          member = 0x7f0a26501150 "TryRestartUnit", parent = 0x1, 
          last_iteration = 0, 
          vtable = 0x7f0a24b42681 <bus_read_message.constprop.160+49>}
        __PRETTY_FUNCTION__ = "object_find_and_run"
#16 0x00007f0a24b4386b in bus_process_object (m=<optimized out>, 
    bus=0x7f0a26434b90) at src/libsystemd/sd-bus/bus-objects.c:1340
        prefix = 0x7fff32c321e0 "\220KC&\n\177"
        r = <optimized out>
        pl = <optimized out>
        found_object = true
#17 process_message (m=<optimized out>, bus=0x7f0a26434b90)
    at src/libsystemd/sd-bus/sd-bus.c:2409
        r = <optimized out>
#18 process_running (priority=0, ret=0x0, hint_priority=false, 
    bus=0x7f0a26434b90) at src/libsystemd/sd-bus/sd-bus.c:2451
        m = <optimized out>
        r = <optimized out>
#19 bus_process_internal.constprop.164 (bus=0x7f0a26434b90, ret=0x0, 
    priority=0, hint_priority=false) at src/libsystemd/sd-bus/sd-bus.c:2640
        _dont_destroy_bus = 0x7f0a26434b90
#20 0x00007f0a24ae1871 in sd_bus_process (ret=0x0, bus=<optimized out>)
    at src/libsystemd/sd-bus/sd-bus.c:2659
No locals.
#21 io_callback (s=<optimized out>, fd=<optimized out>, 
    revents=<optimized out>, userdata=<optimized out>)
    at src/libsystemd/sd-bus/sd-bus.c:2918
        bus = <optimized out>
        __PRETTY_FUNCTION__ = "io_callback"
#22 0x00007f0a24b0bdf0 in source_dispatch (s=0x7f0a264e1a00)
    at src/libsystemd/sd-event/sd-event.c:2103
        __PRETTY_FUNCTION__ = "source_dispatch"
        __func__ = "source_dispatch"
#23 0x00007f0a24b113fe in sd_event_dispatch (e=0x7f0a264207b0)
    at src/libsystemd/sd-event/sd-event.c:2460
        p = <optimized out>
        r = <optimized out>
        e = 0x7f0a264207b0
        __PRETTY_FUNCTION__ = "sd_event_dispatch"
#24 0x00007f0a24af8d20 in sd_event_run (timeout=<optimized out>, 
    e=<optimized out>) at src/libsystemd/sd-event/sd-event.c:2489
        r = 0
#25 manager_loop (m=0x7f0a26420380) at src/core/manager.c:2010
        wait_usec = 18446744073709551615
        rl = {interval = 1000000, begin = 16571505, burst = 50000, num = 135}
        __PRETTY_FUNCTION__ = "manager_loop"
        __func__ = "manager_loop"
#26 0x00007f0a24aa4845 in main (argc=1, argv=<optimized out>)
    at src/core/main.c:1731
        m = 0x7f0a26420380
        r = <optimized out>
        retval = 1
        before_startup = <optimized out>
        after_startup = <optimized out>
        timespan =
"\310\001\000\000\000\000\000\000\310\001\000\000\000\000\000\000\310\001\000\000\000\000\000\000$\000\000\000\000\000\000\000$\000\000\000\000\000\000\000\004\000\000\000\000\000\000\000P\345td\004\000\000\000\210+\001\000\000\000\000"
        fds = 0x0
        reexecute = false
        shutdown_verb = 0x0
        initrd_timestamp = {realtime = 0, monotonic = <optimized out>}
        userspace_timestamp = {realtime = 1417111964157395, 
          monotonic = 1925963}
        kernel_timestamp = {realtime = <optimized out>, monotonic = 0}
        security_start_timestamp = {realtime = 1417111964159510, 
          monotonic = 1928079}
        security_finish_timestamp = {realtime = 1417111964160112, 
          monotonic = 1928680}
        systemd = "systemd"
        skip_setup = <optimized out>
        j = <optimized out>
        loaded_policy = false
        arm_reboot_watchdog = false
        queue_default_job = <optimized out>
        empty_etc = false
        switch_root_dir = 0x0
        switch_root_init = 0x0
        __func__ = "main"
        __PRETTY_FUNCTION__ = "main"

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20141127/8a9b32ad/attachment-0001.html>


More information about the systemd-bugs mailing list