Actions
Bug #4996
closedmon: bogus mds tell can crash monitors
% Done:
0%
Source:
Community (user)
Tags:
Backport:
bobtail, cuttlefish
Regression:
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
I was trying to run this command at the time:
ceph mds tell '*' injectargs '--debug_mds 10/10'
But mistakenly put:
ceph mds tell * injectargs '--debug_mds 10/10'
which turned into:
ceph mds tell 120_status 4242.pcap <lots of stuff> injectargs '--debug_mds 10/10'
giving this output:
2013-05-10 10:29:26.492939 7fe0a1373700 0 -- :/5660 >> 10.252.24.25:6789/0 pipe(0x2860540 sd=7 :0 s=1 pgs=0 cs=0 l=1)? .fault ? mds.120 no up
-8> 2013-05-10 10:29:02.848870 7f0cfbea3700 1 -- 10.252.24.25:6789/0 <== client.? 10.252.24.30:0/5021 4 ==== mon_subscribe({monmap=0+}) v2 ==== 23+0+0 (1620593354 0 0) 0x34c4540 con 0x3957420 -7> 2013-05-10 10:29:02.848891 7f0cfbea3700 10 mon.hotcpc9039@0(leader) e3 handle_subscribe mon_subscribe({monmap=0+}) v2 -6> 2013-05-10 10:29:02.848898 7f0cfbea3700 10 mon.hotcpc9039@0(leader) e3 check_sub monmap next 0 have 3 -5> 2013-05-10 10:29:02.848902 7f0cfbea3700 1 -- 10.252.24.25:6789/0 --> 10.252.24.30:0/5021 -- mon_map v1 -- ?+0 0x36a9400 con 0x3957420 -4> 2013-05-10 10:29:02.848909 7f0cfbea3700 1 -- 10.252.24.25:6789/0 --> client.? 10.252.24.30:0/5021 -- mon_subscribe_ack(300s) v1 -- ?+0 0x38c5000 -3> 2013-05-10 10:29:02.848916 7f0cfbea3700 1 -- 10.252.24.25:6789/0 <== client.? 10.252.24.30:0/5021 5 ==== mon_command(mds tell v 0) v1 ==== 53+0+0 (1792923729 0 0) 0x35ed000 con 0x3957420 -2> 2013-05-10 10:29:02.848923 7f0cfbea3700 0 mon.hotcpc9039@0(leader) e3 handle_command mon_command(mds tell v 0) v1 -1> 2013-05-10 10:29:02.849138 7f0cfbea3700 10 mon.hotcpc9039@0(leader).mds e707 preprocess_query mon_command(mds tell v 0) v1 from client.? 10.252.24.30:0/5021 0> 2013-05-10 10:29:03.640085 7f0cfbea3700 -1 *** Caught signal (Segmentation fault) ** in thread 7f0cfbea3700 ceph version 0.61 (237f3f1e8d8c3b85666529860285dcdffdeda4c5) 1: /usr/bin/ceph-mon() [0x594609] 2: (()+0xeff0) [0x7f0d019bbff0] 3: (Monitor::send_command(entity_inst_t const&, std::vector<std::string, std::allocator<std::string> > const&, unsigned long)+0x179) [0x49c5f9] 4: (MDSMonitor::preprocess_command(MMonCommand*)+0xe0b) [0x51d8db] 5: (MDSMonitor::preprocess_query(PaxosServiceMessage*)+0x233) [0x5236a3] 6: (PaxosService::dispatch(PaxosServiceMessage*)+0x57c) [0x4e0d8c] 7: (Monitor::handle_command(MMonCommand*)+0x3db) [0x4a773b] 8: (Monitor::_ms_dispatch(Message*)+0xd49) [0x4b4889] 9: (Monitor::ms_dispatch(Message*)+0x32) [0x4cd572] 10: (DispatchQueue::entry()+0x3f1) [0x6a58d1] 11: (DispatchQueue::DispatchThread::entry()+0xd) [0x6a10cd] 12: (()+0x68ca) [0x7f0d019b38ca] 13: (clone()+0x6d) [0x7f0d006aa86d] NOTE: a copy of the executable, or `objdump -rdS <executable>` is needed to interpret this.
Actions