Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-38285

SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      SET GLOBAL innodb_lru_scan_depth=86400;
      SET debug_dbug='+d,page_intermittent_checksum_mismatch';
      CREATE TEMPORARY TABLE t (i INT);
      SELECT * FROM mysql.transaction_registry;
      CREATE TEMPORARY TABLE 龡龡龡 (丌丌丌 INT) DEFAULT CHARSET=utf8;
      

      Leads to:

      CS 11.4.10 4cff562f3f89d4df03e09233d835d0451bc37cc4 (Debug, Clang 18.1.3-11) Build 05/12/2025

      Core was generated by `/test/MD051225-mariadb-11.4.10-linux-x86_64-dbg/bin/mariadbd --no-defaults --ma'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  0x00006430f26994fa in std::__atomic_base<unsigned int>::load (this=0x58, __m=std::memory_order_seq_cst)at /usr/bin/../lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h:505
      505		return __atomic_load_n(&_M_i, int(__m));
      [Current thread is 1 (LWP 2761629)]
      (gdb) bt
      #0  0x00006430f26994fa in std::__atomic_base<unsigned int>::load (this=0x58, __m=std::memory_order_seq_cst)at /usr/bin/../lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h:505
      #1  Atomic_relaxed<unsigned int>::operator unsigned int (this=0x58)at /test/11.4_dbg/include/my_atomic_wrapper.h:48
      #2  0x00006430f26a7b19 in buf_page_t::state (this=0x0) at include/buf0buf.h:614
      #3  0x00006430f26a7aa5 in buf_page_t::in_file (this=0x0)at include/buf0buf.h:798
      #4  0x00006430f29abcad in buf_page_t::is_accessed (this=0x0)at include/buf0buf.h:818
      #5  0x00006430f29d34a9 in buf_page_t::set_accessed (this=0x0)at include/buf0buf.h:811
      #6  0x00006430f29f3925 in buf_page_make_young_if_needed (bpage=0x0)at /test/11.4_dbg/storage/innobase/buf/buf0lru.cc:726
      #7  0x00006430f2a0200b in dict_hdr_get (mtr=0x7b70b0facba0)at /test/11.4_dbg/storage/innobase/dict/dict0boot.cc:46
      #8  0x00006430f2a01bbb in dict_hdr_get_new_id (trx=0x7b70b104b680, table_id=0x0, index_id=0x7b6fa8019400, space_id=0x0)at /test/11.4_dbg/storage/innobase/dict/dict0boot.cc:67
      #9  0x00006430f2a04c97 in dict_build_index_def (table=0x7b6fa80394f0, index=0x7b6fa8019400, trx=0x7b70b104b680)at /test/11.4_dbg/storage/innobase/dict/dict0crea.cc:703
      #10 0x00006430f287856a in row_create_index_for_mysql (index=0x7b6fa8019400, trx=0x7b70b104b680, field_lengths=0x0, mode=FIL_ENCRYPTION_DEFAULT, key_id=1) at /test/11.4_dbg/storage/innobase/row/row0mysql.cc:2174
      #11 0x00006430f267a0e4 in create_table_info_t::create_table (this=0x7b70b0fad560, create_fk=true)at /test/11.4_dbg/storage/innobase/handler/ha_innodb.cc:12771
      #12 0x00006430f26663e1 in ha_innobase::create (this=0x7b6fa80374a8, name=0x7b70b0faf7e0 "/test/MD051225-mariadb-11.4.10-linux-x86_64-dbg/tmp/#sql-temptable-2a1bfd-4-1", form=0x7b70b0fae3e0, create_info=0x7b70b0faffb8, file_per_table=true, trx=0x7b70b104b680)at /test/11.4_dbg/storage/innobase/handler/ha_innodb.cc:13267
      #13 0x00006430f267b6d7 in ha_innobase::create (this=0x7b6fa80374a8, name=0x7b70b0faf7e0 "/test/MD051225-mariadb-11.4.10-linux-x86_64-dbg/tmp/#sql-temptable-2a1bfd-4-1", form=0x7b70b0fae3e0, create_info=0x7b70b0faffb8)at /test/11.4_dbg/storage/innobase/handler/ha_innodb.cc:13315
      #14 0x00006430f22a122d in handler::ha_create (this=0x7b6fa80374a8, name=0x7b70b0faf7e0 "/test/MD051225-mariadb-11.4.10-linux-x86_64-dbg/tmp/#sql-temptable-2a1bfd-4-1", form=0x7b70b0fae3e0, info_arg=0x7b70b0faffb8)at /test/11.4_dbg/sql/handler.cc:5842
      #15 0x00006430f22a2c2e in ha_create_table (thd=0x7b6fa8000d58, path=0x7b70b0faf7e0 "/test/MD051225-mariadb-11.4.10-linux-x86_64-dbg/tmp/#sql-temptable-2a1bfd-4-1", db=0x7b6fa8019bd8 "test", table_name=0x7b6fa8019ba0 "龡龡龡", create_info=0x7b70b0faffb8, frm=0x7b70b0faf760, skip_frm_file=false)at /test/11.4_dbg/sql/handler.cc:6318
      #16 0x00006430f1fa1d51 in create_table_impl (thd=0x7b6fa8000d58, ddl_log_state_create=0x0, ddl_log_state_rm=0x0, orig_db=@0x7b6fa8019c10: {str = 0x7b6fa8019bd8 "test", length = 4}, orig_table_name=@0x7b6fa8019c20: {str = 0x7b6fa8019ba0 "龡龡龡", length = 9}, db=@0x7b6fa8019c10: {str = 0x7b6fa8019bd8 "test", length = 4}, table_name=@0x7b6fa8019c20: {str = 0x7b6fa8019ba0 "龡龡龡", length = 9}, path=@0x7b70b0faf780: {str = 0x7b70b0faf7e0 "/test/MD051225-mariadb-11.4.10-linux-x86_64-dbg/tmp/#sql-temptable-2a1bfd-4-1", length = 77}, options={m_options = DDL_options_st::OPT_NONE}, create_info=0x7b70b0faffb8, alter_info=0x7b70b0fafe48, create_table_mode=0, is_trans=0x7b70b0fafb1f, key_info=0x7b70b0faf7a0, key_count=0x7b70b0faf79c, frm=0x7b70b0faf760)at /test/11.4_dbg/sql/sql_table.cc:4851
      #17 0x00006430f1fa0db8 in mysql_create_table_no_lock (thd=0x7b6fa8000d58, ddl_log_state_create=0x7b70b0fafb48, ddl_log_state_rm=0x7b70b0fafb28, create_info=0x7b70b0faffb8, alter_info=0x7b70b0fafe48, is_trans=0x7b70b0fafb1f, create_table_mode=0, table_list=0x7b6fa8019bf0)at /test/11.4_dbg/sql/sql_table.cc:4953
      #18 0x00006430f1fbcf4e in mysql_create_table (thd=0x7b6fa8000d58, create_table=0x7b6fa8019bf0, create_info=0x7b70b0faffb8, alter_info=0x7b70b0fafe48) at /test/11.4_dbg/sql/sql_table.cc:5200
      #19 0x00006430f1fbb575 in Sql_cmd_create_table_like::execute (this=0x7b6fa8019b68, thd=0x7b6fa8000d58)at /test/11.4_dbg/sql/sql_table.cc:13572
      #20 0x00006430f1e8fc94 in mysql_execute_command (thd=0x7b6fa8000d58, is_called_from_prepared_stmt=false) at /test/11.4_dbg/sql/sql_parse.cc:5915
      #21 0x00006430f1e7ee14 in mysql_parse (thd=0x7b6fa8000d58, rawbuf=0x7b6fa8019a80 "CREATE TEMPORARY TABLE 龡龡龡 (丌丌丌 INT) DEFAULT CHARSET=utf8", length=69, parser_state=0x7b70b0fb1a30)at /test/11.4_dbg/sql/sql_parse.cc:7944
      #22 0x00006430f1e7c2c4 in dispatch_command (command=COM_QUERY, thd=0x7b6fa8000d58, packet=0x7b6fa800af89 "CREATE TEMPORARY TABLE 龡龡龡 (丌丌丌 INT) DEFAULT CHARSET=utf8", packet_length=69, blocking=true)at /test/11.4_dbg/sql/sql_parse.cc:1920
      #23 0x00006430f1e7f9c3 in do_command (thd=0x7b6fa8000d58, blocking=true)at /test/11.4_dbg/sql/sql_parse.cc:1433
      #24 0x00006430f2063969 in do_handle_one_connection (connect=0x6430f956e478, put_in_cache=true) at /test/11.4_dbg/sql/sql_connect.cc:1497
      #25 0x00006430f2063702 in handle_one_connection (arg=0x6430f95aae18)at /test/11.4_dbg/sql/sql_connect.cc:1409
      #26 0x00007b70b369caa4 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #27 0x00007b70b3729c6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Bug Detection Matrix

          Rel    o/d  Build   Commit                                    UniqueID observed             
      CS  10.6   dbg  051225  d0ae38c0ad48701dacfb517bac4eb90c55d953b0  SIGSEGV|row_create_prebuilt|ha_innobase::open|handler::ha_open|open_table_from_share
      CS  10.6   opt  051225  d0ae38c0ad48701dacfb517bac4eb90c55d953b0  No bug found                  
      CS  10.11  dbg  051225  f3a5d38fa7bd51cfff41892cc3c12fceab794964  SIGSEGV|row_create_prebuilt|ha_innobase::open|handler::ha_open|open_table_from_share
      CS  10.11  opt  051225  f3a5d38fa7bd51cfff41892cc3c12fceab794964  No bug found                  
      CS  11.4   dbg  051225  4cff562f3f89d4df03e09233d835d0451bc37cc4  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      CS  11.4   opt  051225  4cff562f3f89d4df03e09233d835d0451bc37cc4  No bug found                  
      CS  11.8   dbg  051225  a7528a6190807281d3224e4e67a9b76083a202a6  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      CS  11.8   opt  051225  a7528a6190807281d3224e4e67a9b76083a202a6  No bug found                  
      CS  12.1   dbg  051225  70117463f032d59f8e328335e19b59157d34cf07  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      CS  12.1   opt  051225  70117463f032d59f8e328335e19b59157d34cf07  No bug found                  
      CS  12.3   dbg  051225  e85bc659188be021897e8578aec42becfbb58c27  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      CS  12.3   dbg  081225  e85bc659188be021897e8578aec42becfbb58c27  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      CS  12.3   opt  051225  e85bc659188be021897e8578aec42becfbb58c27  No bug found                  
      CS  12.3   opt  081225  e85bc659188be021897e8578aec42becfbb58c27  No bug found                  
      ES  10.6   dbg  051225  6676675becc1d18848682cea33b073f5aefc4238  SIGSEGV|row_create_prebuilt|ha_innobase::open|handler::ha_open|open_table_from_share
      ES  10.6   opt  051225  6676675becc1d18848682cea33b073f5aefc4238  MARIADBD_ERROR|mariadbd: caching_sha2_password: failed to read private_key.pem: 2 "No such file or directory"
      ES  11.4   dbg  051225  5443fe2c936255717a62abdab246ab5e467f4266  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      ES  11.4   opt  051225  5443fe2c936255717a62abdab246ab5e467f4266  No bug found                  
      ES  11.8   dbg  051225  76b4c5d3d3f3d8d2f2df28e89cc276f8539e08af  SIGSEGV|std::__atomic_base<unsigned int>::load|Atomic_relaxed<unsigned int>::operator unsigned int|buf_page_t::state|buf_page_t::in_file
      ES  11.8   opt  051225  76b4c5d3d3f3d8d2f2df28e89cc276f8539e08af  No bug found                  
      

      Attachments

        Activity

          People

            thiru Thirunarayanan Balathandayuthapani
            saahil Saahil Alam
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.