Project

General

Profile

Actions

Bug #13805

closed

segfault in Objecter::handle_watch_notify

Added by Sage Weil over 8 years ago. Updated over 7 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Category:
-
Target version:
-
% Done:

0%

Source:
Q/A
Tags:
Backport:
infernalis,hammer
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

(gdb) bt
#0  0x00007f6017d912e3 in AO_fetch_and_add_full (incr=18446744073709551615, p=0x20) at /usr/include/atomic_ops/sysdeps/gcc/x86.h:59
#1  dec (this=0x20) at ./include/atomic.h:112
#2  ceph::buffer::ptr::release (this=0x7f5fec01f1e8) at common/buffer.cc:746
#3  0x00007f601a5212b7 in std::_List_base<ceph::buffer::ptr, std::allocator<ceph::buffer::ptr> >::_M_clear() ()
#4  0x00007f6017d939b6 in clear (this=0x7f601b607968) at /usr/include/c++/4.8/bits/stl_list.h:1230
#5  clear (this=0x7f601b607968) at ./include/buffer.h:408
#6  ceph::buffer::list::claim (this=0x7f601b607968, bl=..., flags=flags@entry=0) at common/buffer.cc:1437
#7  0x00007f6017dfb2d3 in Objecter::handle_watch_notify (this=this@entry=0x7f601b5d6ac0, m=m@entry=0x7f5fec01f0d0) at osdc/Objecter.cc:827
#8  0x00007f6017e0fffb in Objecter::ms_dispatch (this=0x7f601b5d6ac0, m=0x7f5fec01f0d0) at osdc/Objecter.cc:882
#9  0x00007f6017ff3756 in ms_fast_dispatch (m=0x7f5fec01f0d0, this=0x7f601b5d5e60) at ./msg/Messenger.h:554
#10 DispatchQueue::fast_dispatch (this=0x7f601b5d6028, m=0x7f5fec01f0d0) at msg/simple/DispatchQueue.cc:71
#11 0x00007f601800c372 in Pipe::reader (this=0x7f601b61c010) at msg/simple/Pipe.cc:1638
#12 0x00007f601801463d in Pipe::Reader::entry (this=<optimized out>) at msg/simple/Pipe.h:50
#13 0x00007f6017b2f182 in start_thread (arg=0x7f5ffaffd700) at pthread_create.c:312
#14 0x00007f601734247d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111


/a/sage-2015-11-14_18:37:48-rados:thrash-wip-bigbang---basic-multi/1150440

this appears to be a second notify coming through because of a racing reconnect and calling the notify Context complete() twice (teh second time on a freed value).

zless remote/mira109/log/ceph-client.admin.29002.log.gz
is the partial log


Related issues 2 (0 open2 closed)

Copied to Ceph - Backport #13807: hammer: segfault in Objecter::handle_watch_notifyResolvedNathan CutlerActions
Copied to Ceph - Backport #13808: infernalis: segfault in Objecter::handle_watch_notifyRejectedNathan CutlerActions
Actions

Also available in: Atom PDF