[jira] [Created] (HDDS-16447) SCM out of lock race re inserts a DELETE op for an already deleted replica, corrupting inflight accounting

["Siyao Meng (Jira)" <ji...@apache.org>]

Siyao Meng created HDDS-16447:
---------------------------------

             Summary: SCM out of lock race re inserts a DELETE op for an already deleted replica, corrupting inflight accounting
                 Key: HDDS-16447
                 URL: https://issues.apache.org/jira/browse/HDDS-16447
             Project: Apache Ozone
          Issue Type: Bug
            Reporter: Siyao Meng


h3. Finding
An out-of-lock race re-inserts a DELETE op for an already-deleted replica, producing an orphaned pending op that is never confirmable and resent every RM cycle; the inflated inflight-delete count propagates to a real external effect (RM issues spurious replicate and redundant delete commands to datanodes, and over/under-replication accounting stays corrupted for the whole SCM leadership term). Persistent until leadership change, so High rather than Critical.

h3. Classification
* Verdict: REPRODUCED
* Severity: High
* Source: Specula TLA+ model checking and confirmation debate, finding MC-2

h3. Reproduce
{noformat}
Ozone commit: 9fbf9ee0cb1bd2f5f5d437b6719ebbe5309351fb
Specula:      v1.1.0 (commit c6aa3dfa)
Target:       scm-pending-replica-ops
Guidance:     campaigns/ozone-9fbf9ee/targets/014-scm-pending-replica-ops/.prompt-extra.md
{noformat}
{code:none}
specula run --agent=claude-code --effort=medium --keep-original --max-parallel=2 \
  --enable-reviews --confirm-debate --tlc-memory-limit=28G --tlc-worker-limit=8 \
  "scm-pending-replica-ops|apache/ozone|Java|Use the target-specific .prompt-extra.md"
{code}
Discovered under HDDS-16431 (Specula TLA+ verification effort). The TLA+ specification, counterexample, and confirmation debate live in the Specula run artifacts.

Generated with Specula (Claude Opus 4.8).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org