[jira] [Updated] (HDDS-16457) DiskBalancer EC move plus crash leaves a durable CLOSED plus UNHEALTHY two copy inconsistency

["Siyao Meng (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HDDS-16457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Siyao Meng updated HDDS-16457:
------------------------------
    Attachment: HDDS-16457.001.patch

> DiskBalancer EC move plus crash leaves a durable CLOSED plus UNHEALTHY two copy inconsistency
> ---------------------------------------------------------------------------------------------
>
>                 Key: HDDS-16457
>                 URL: https://issues.apache.org/jira/browse/HDDS-16457
>             Project: Apache Ozone
>          Issue Type: Bug
>            Reporter: Siyao Meng
>            Priority: Major
>         Attachments: HDDS-16457.001.patch
>
>
> h3. Finding
> An EC replica move plus a mid-move crash and restart leaves a durable two-copy inconsistency (CLOSED source plus an UNHEALTHY destination) that no DN-local mechanism reclaims, and the UNHEALTHY copy can win the in-memory slot and be reported to SCM. Triggerable through normal DiskBalancer EC moves with a single crash in the AtomicMove-to-import window; harm is a permanent orphaned replica (disk leak plus volume-accounting drift) and a spurious UNHEALTHY report, so bounded-but-durable rather than Critical.
> h3. Classification
> * Verdict: REPRODUCED
> * Severity: High
> * Source: Specula TLA+ model checking and confirmation debate, finding MC-1
> h3. Reproduce
> {noformat}
> Ozone commit: 9fbf9ee0cb1bd2f5f5d437b6719ebbe5309351fb
> Specula:      v1.1.0 (commit c6aa3dfa)
> Target:       dn-disk-balancer
> Guidance:     campaigns/ozone-9fbf9ee/targets/021-dn-disk-balancer/.prompt-extra.md
> {noformat}
> {code:none}
> specula run --agent=claude-code --effort=medium --keep-original --max-parallel=2 \
>   --enable-reviews --confirm-debate --tlc-memory-limit=28G --tlc-worker-limit=8 \
>   "dn-disk-balancer|apache/ozone|Java|Use the target-specific .prompt-extra.md"
> {code}
> Discovered under HDDS-16433 (Specula TLA+ verification effort). The TLA+ specification, counterexample, and confirmation debate live in the Specula run artifacts.
> Generated with Specula (Claude Opus 4.8).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org