[#MDEV-23233] Race condition for btr_search_drop_page_hash_index() in buf_page

Assert hit during RQG testing

[rr 105081 1367598]mysqld: storage/innobase/btr/btr0sea.cc:1109: void btr_search_drop_page_hash_index(buf_block_t*): Assertion `block->page.buf_fix_count == 0 || buf_block_get_state(block) == BUF_BLOCK_REMOVE_HASH || rw_lock_own_flagged(&block->lock, RW_LOCK_FLAG_X | RW_LOCK_FLAG_S | RW_LOCK_FLAG_SX)' failed.

[rr 105081 1367618]200717 19:06:53 [rr 105081 1367621][ERROR] mysqld got signal 6 ;

....

Query (0x641740011500): ALTER TABLE `t6` ENCRYPTION_KEY_ID=33

Status: KILL_TIMEOUT

(rr) bt

#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51

#1  0x00002fd775b878b1 in __GI_abort () at abort.c:79

#2  0x00002fd775b7742a in __assert_fail_base (fmt=0x2fd775cfea38 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n",

    assertion=assertion@entry=0x55b4b39672c8 "block->page.buf_fix_count == 0 || buf_block_get_state(block) == BUF_BLOCK_REMOVE_HASH || rw_lock_own_flagged(&block->lock, RW_LOCK_FLAG_X | RW_LOCK_FLAG_S | RW_LOCK_FLAG_SX)",

    file=file@entry=0x55b4b3966e08 "/home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0sea.cc", line=line@entry=1109,

    function=function@entry=0x55b4b3968140 <btr_search_drop_page_hash_index(buf_block_t*)::__PRETTY_FUNCTION__> "void btr_search_drop_page_hash_index(buf_block_t*)") at assert.c:92

#3  0x00002fd775b774a2 in __GI___assert_fail (

    assertion=assertion@entry=0x55b4b39672c8 "block->page.buf_fix_count == 0 || buf_block_get_state(block) == BUF_BLOCK_REMOVE_HASH || rw_lock_own_flagged(&block->lock, RW_LOCK_FLAG_X | RW_LOCK_FLAG_S | RW_LOCK_FLAG_SX)",

    file=file@entry=0x55b4b3966e08 "/home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0sea.cc", line=line@entry=1109,

    function=function@entry=0x55b4b3968140 <btr_search_drop_page_hash_index(buf_block_t*)::__PRETTY_FUNCTION__> "void btr_search_drop_page_hash_index(buf_block_t*)") at assert.c:101

#4  0x000055b4b3255cb0 in btr_search_drop_page_hash_index (block=block@entry=0x2fd774fcbfb0) at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0sea.cc:1109

#5  0x000055b4b327c39e in buf_page_create (page_id=..., zip_size=zip_size@entry=0, mtr=mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0buf.cc:5620

#6  0x000055b4b334adff in fsp_page_create (space=space@entry=0x641740020740, offset=<optimized out>, rw_latch=rw_latch@entry=RW_X_LATCH, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640)

    at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:1160

#7  0x000055b4b335039a in fsp_alloc_free_page (space=space@entry=0x641740020740, hint=<optimized out>, hint@entry=0, rw_latch=rw_latch@entry=RW_X_LATCH, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640)

    at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:1301

#8  0x000055b4b3351b64 in fseg_alloc_free_page_low (space=space@entry=0x641740020740, seg_inode=seg_inode@entry=0x2fd7754ea6f2 "", hint=hint@entry=0, direction=direction@entry=111 'o', rw_latch=rw_latch@entry=RW_X_LATCH, mtr=mtr@entry=0x64001fe9950,

    init_mtr=0x64174005c640, has_done_reservation=1) at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:2335

#9  0x000055b4b3352c5d in fseg_alloc_free_page_general (seg_header=<optimized out>, hint=hint@entry=0, direction=direction@entry=111 'o', has_done_reservation=has_done_reservation@entry=1, mtr=mtr@entry=0x64001fe9950,

    init_mtr=init_mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:2468

#10 0x000055b4b31f7629 in btr_page_alloc_low (index=<optimized out>, hint_page_no=hint_page_no@entry=0, file_direction=file_direction@entry=111 'o', level=0, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640)

    at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0btr.cc:539

#11 0x000055b4b31f7647 in btr_page_alloc (index=<optimized out>, hint_page_no=hint_page_no@entry=0, file_direction=file_direction@entry=111 'o', level=<optimized out>, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640)

    at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0btr.cc:589

#12 0x000055b4b320e57d in PageBulk::init (this=this@entry=0x64174005c630) at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0bulk.cc:85

#13 0x000055b4b320f905 in BtrBulk::insert (this=this@entry=0x64001fea730, tuple=tuple@entry=0x64174050dde0, level=level@entry=0) at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0bulk.cc:931

#14 0x000055b4b30dcafa in BtrBulk::insert (tuple=0x64174050dde0, this=0x64001fea730) at /home/mleich/bb-10.4-thiru/storage/innobase/include/btr0bulk.h:313

#15 row_merge_insert_index_tuples (index=<optimized out>, old_table=old_table@entry=0x7fa48003c070, fd=..., block=block@entry=0x0, row_buf=row_buf@entry=0x3e2440cf4d0, btr_bulk=btr_bulk@entry=0x64001fea730, table_total_rows=<optimized out>,

    pct_progress=pct_progress@entry=33.333333333333336, pct_cost=pct_cost@entry=33.333333333333336, crypt_block=<optimized out>, space=<optimized out>, stage=<optimized out>) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0merge.cc:3667

#16 0x000055b4b30e4e06 in row_merge_read_clustered_index (trx=trx@entry=0x2fd775751cd0, table=table@entry=0x64001febd10, old_table=old_table@entry=0x7fa48003c070, new_table=new_table@entry=0x641740045d10, online=online@entry=true,

    index=index@entry=0x641740026f18, fts_sort_idx=<optimized out>, psort_info=<optimized out>, files=<optimized out>, key_numbers=<optimized out>, n_index=<optimized out>, defaults=<optimized out>, add_v=<optimized out>, col_map=<optimized out>,

    add_autoinc=<optimized out>, sequence=..., block=<optimized out>, skip_pk_sort=<optimized out>, tmpfd=<optimized out>, stage=<optimized out>, pct_cost=pct_cost@entry=33.333333333333336, crypt_block=<optimized out>, eval_table=<optimized out>,

    allow_not_null=<optimized out>) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0merge.cc:2630

#17 0x000055b4b30e5f0a in row_merge_build_indexes (trx=<optimized out>, old_table=<optimized out>, new_table=0x641740045d10, online=<optimized out>, indexes=<optimized out>, key_numbers=<optimized out>, n_indexes=<optimized out>, table=<optimized out>,

    defaults=<optimized out>, col_map=<optimized out>, add_autoinc=<optimized out>, sequence=..., skip_pk_sort=<optimized out>, stage=<optimized out>, add_v=<optimized out>, eval_table=<optimized out>, allow_not_null=<optimized out>)

    at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0merge.cc:4708

#18 0x000055b4b2f8509e in ha_innobase::inplace_alter_table (this=0x64173c0a5bb0, altered_table=0x64001febd10, ha_alter_info=0x64001febc70) at /home/mleich/bb-10.4-thiru/storage/innobase/handler/handler0alter.cc:8470

#19 0x000055b4b2b175b2 in handler::ha_inplace_alter_table (ha_alter_info=0x64001febc70, altered_table=0x64001febd10, this=<optimized out>) at /home/mleich/bb-10.4-thiru/sql/handler.h:4366

#20 mysql_inplace_alter_table (thd=thd@entry=0x641740000ce8, table_list=0x641740011650, table=0x64173c0aa238, altered_table=altered_table@entry=0x64001febd10, ha_alter_info=ha_alter_info@entry=0x64001febc70,

    inplace_supported=inplace_supported@entry=HA_ALTER_INPLACE_COPY_NO_LOCK, target_mdl_request=0x64001fecae0, alter_ctx=0x64001fed620) at /home/mleich/bb-10.4-thiru/sql/sql_table.cc:7746

#21 0x000055b4b2b23313 in mysql_alter_table (thd=thd@entry=0x641740000ce8, new_db=new_db@entry=0x6417400054a8, new_name=new_name@entry=0x6417400058b0, create_info=create_info@entry=0x64001fee210, table_list=<optimized out>,

    table_list@entry=0x641740011650, alter_info=alter_info@entry=0x64001fee150, order_num=0, order=0x0, ignore=false) at /home/mleich/bb-10.4-thiru/sql/sql_table.cc:10156

#22 0x000055b4b2ba0d7f in Sql_cmd_alter_table::execute (this=<optimized out>, thd=0x641740000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_alter.cc:514

#23 0x000055b4b2a5e315 in mysql_execute_command (thd=thd@entry=0x641740000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:6099

#24 0x000055b4b2a602d9 in mysql_parse (thd=thd@entry=0x641740000ce8, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x64001fef530, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false)

    at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:7899

#25 0x000055b4b2a62c75 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x641740000ce8, packet=packet@entry=0x6417400081a9 "ALTER TABLE `t6` ENCRYPTION_KEY_ID=33 /* E_R Thread7 QNO 1595 CON_ID 23 */ ",

    packet_length=packet_length@entry=75, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:1833

#26 0x000055b4b2a67681 in do_command (thd=0x641740000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:1351

#27 0x000055b4b2b99aa2 in do_handle_one_connection (connect=connect@entry=0x55b4b69b9ef8) at /home/mleich/bb-10.4-thiru/sql/sql_connect.cc:1412

#28 0x000055b4b2b99bc7 in handle_one_connection (arg=0x55b4b69b9ef8) at /home/mleich/bb-10.4-thiru/sql/sql_connect.cc:1316

#29 0x00006bca0b6bc6db in start_thread (arg=0x64001ff0700) at pthread_create.c:463

#30 0x00002fd775c68a3f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

(rr)

origin/bb-10.4-thiru a13662dac1df224c607983815b2fe85ee72749c2 2020-07-17T22:49:03+05:30

RQG

git clone https://github.com/mleich1/rqg --branch experimental RQG

origin/experimental f3d72ce51b150ee1f52a93d18f2024af293d925e 2020-07-13T20:46:53+02:00

perl rqg.pl \

--grammar=conf/mariadb/innodb_compression_encryption.yy \

--gendata=conf/mariadb/innodb_compression_encryption.zz \

--mysqld=--plugin-load-add=file_key_management.so \

--mysqld=--loose-file-key-management-filename=/home/mleich/RQG_mleich/conf/mariadb/encryption_keys.txt \

--mysqld=--innodb_use_native_aio=0 \

--mysqld=--innodb_lock_schedule_algorithm=fcfs \

--mysqld=--loose-idle_write_transaction_timeout=0 \

--mysqld=--loose-idle_transaction_timeout=0 \

--mysqld=--loose-idle_readonly_transaction_timeout=0 \

--mysqld=--connect_timeout=60 \

--mysqld=--interactive_timeout=28800 \

--mysqld=--slave_net_timeout=60 \

--mysqld=--net_read_timeout=30 \

--mysqld=--net_write_timeout=60 \

--mysqld=--loose-table_lock_wait_timeout=50 \

--mysqld=--wait_timeout=28800 \

--mysqld=--lock-wait-timeout=86400 \

--mysqld=--innodb-lock-wait-timeout=50 \

--no-mask \

--queries=10000000 \

--seed=random \

--reporters=Backtrace \

--reporters=ErrorLog \

--reporters=Deadlock1 \

--reporters=CrashRecovery1 \

--validators=None \

--mysqld=--log_output=none \

--mysqld=--log-bin \

--mysqld=--log_bin_trust_function_creators=1 \

--mysqld=--loose-max-statement-time=30 \

--mysqld=--loose-debug_assert_on_not_freed_memory=0 \

--engine=InnoDB \

--restart_timeout=120 \

--duration=300 \

--mysqld=--loose-innodb_fatal_semaphore_wait_threshold=300 \

--threads=9 \

--mysqld=--innodb_page_size=4K \

--mysqld=--innodb-buffer-pool-size=8M \

--duration=300 \

--no_mask \

--workdir=<local settings> \

--vardir=<local settings> \

--mtr-build-thread=<local settings> \

--basedir1=<local settings> \

--basedir2=<local settings> \

--script_debug=_nix_ \

--rr=Server \

--rr_options=--chaos

t6:

===

(rr) when

Current event: 1366987

(rr) where

#0  0x00002fd776183c87 in sched_yield () at /home/roc/rr/rr/src/preload/overrides.c:160

#1  0x000055b4b303de4b in os_thread_yield () at /home/mleich/bb-10.4-thiru/storage/innobase/os/os0thread.cc:212

#2  0x000055b4b2f67419 in TTASEventMutex<GenericPolicy>::enter (line=<optimized out>, filename=<optimized out>, max_delay=<optimized out>, max_spins=60,

    this=<optimized out>) at /home/mleich/bb-10.4-thiru/storage/innobase/include/ib0mutex.h:456

#3  PolicyMutex<TTASEventMutex<GenericPolicy> >::enter (this=0x55b4b66755d0, n_spins=30, n_delay=4,

    name=0x55b4b38bd788 "/home/mleich/bb-10.4-thiru/storage/innobase/include/buf0buf.ic", line=853)

    at /home/mleich/bb-10.4-thiru/storage/innobase/include/ib0mutex.h:594

#4  0x000055b4b327c217 in buf_block_free (block=0x2fd775008af0) at /home/mleich/bb-10.4-thiru/storage/innobase/include/buf0buf.ic:853

#5  buf_page_create (page_id=..., zip_size=zip_size@entry=0, mtr=mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0buf.cc:5616

#6  0x000055b4b334adff in fsp_page_create (space=space@entry=0x641740020740, offset=<optimized out>, rw_latch=rw_latch@entry=RW_X_LATCH,

    mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:1160

#7  0x000055b4b335039a in fsp_alloc_free_page (space=space@entry=0x641740020740, hint=<optimized out>, hint@entry=0, rw_latch=rw_latch@entry=RW_X_LATCH,

    mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:1301

#8  0x000055b4b3351b64 in fseg_alloc_free_page_low (space=space@entry=0x641740020740, seg_inode=seg_inode@entry=0x2fd7754ea6f2 "", hint=hint@entry=0,

    direction=direction@entry=111 'o', rw_latch=rw_latch@entry=RW_X_LATCH, mtr=mtr@entry=0x64001fe9950, init_mtr=0x64174005c640, has_done_reservation=1)

    at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:2335

#9  0x000055b4b3352c5d in fseg_alloc_free_page_general (seg_header=<optimized out>, hint=hint@entry=0, direction=direction@entry=111 'o',

    has_done_reservation=has_done_reservation@entry=1, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640)

    at /home/mleich/bb-10.4-thiru/storage/innobase/fsp/fsp0fsp.cc:2468

#10 0x000055b4b31f7629 in btr_page_alloc_low (index=<optimized out>, hint_page_no=hint_page_no@entry=0, file_direction=file_direction@entry=111 'o',

    level=0, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0btr.cc:539

#11 0x000055b4b31f7647 in btr_page_alloc (index=<optimized out>, hint_page_no=hint_page_no@entry=0, file_direction=file_direction@entry=111 'o',

    level=<optimized out>, mtr=mtr@entry=0x64001fe9950, init_mtr=init_mtr@entry=0x64174005c640)

    at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0btr.cc:589

#12 0x000055b4b320e57d in PageBulk::init (this=this@entry=0x64174005c630) at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0bulk.cc:85

#13 0x000055b4b320f905 in BtrBulk::insert (this=this@entry=0x64001fea730, tuple=tuple@entry=0x64174050dde0, level=level@entry=0)

    at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0bulk.cc:931

#14 0x000055b4b30dcafa in BtrBulk::insert (tuple=0x64174050dde0, this=0x64001fea730) at /home/mleich/bb-10.4-thiru/storage/innobase/include/btr0bulk.h:313

#15 row_merge_insert_index_tuples (index=<optimized out>, old_table=old_table@entry=0x7fa48003c070, fd=..., block=block@entry=0x0,

    row_buf=row_buf@entry=0x3e2440cf4d0, btr_bulk=btr_bulk@entry=0x64001fea730, table_total_rows=<optimized out>,

    pct_progress=pct_progress@entry=33.333333333333336, pct_cost=pct_cost@entry=33.333333333333336, crypt_block=<optimized out>, space=<optimized out>,

    stage=<optimized out>) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0merge.cc:3667

#16 0x000055b4b30e4e06 in row_merge_read_clustered_index (trx=trx@entry=0x2fd775751cd0, table=table@entry=0x64001febd10,

    old_table=old_table@entry=0x7fa48003c070, new_table=new_table@entry=0x641740045d10, online=online@entry=true, index=index@entry=0x641740026f18,

    fts_sort_idx=<optimized out>, psort_info=<optimized out>, files=<optimized out>, key_numbers=<optimized out>, n_index=<optimized out>,

    defaults=<optimized out>, add_v=<optimized out>, col_map=<optimized out>, add_autoinc=<optimized out>, sequence=..., block=<optimized out>,

    skip_pk_sort=<optimized out>, tmpfd=<optimized out>, stage=<optimized out>, pct_cost=pct_cost@entry=33.333333333333336, crypt_block=<optimized out>,

    eval_table=<optimized out>, allow_not_null=<optimized out>) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0merge.cc:2630

#17 0x000055b4b30e5f0a in row_merge_build_indexes (trx=<optimized out>, old_table=<optimized out>, new_table=0x641740045d10, online=<optimized out>,

    indexes=<optimized out>, key_numbers=<optimized out>, n_indexes=<optimized out>, table=<optimized out>, defaults=<optimized out>,

---Type <return> to continue, or q <return> to quit---

    col_map=<optimized out>, add_autoinc=<optimized out>, sequence=..., skip_pk_sort=<optimized out>, stage=<optimized out>, add_v=<optimized out>,

    eval_table=<optimized out>, allow_not_null=<optimized out>) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0merge.cc:4708

#18 0x000055b4b2f8509e in ha_innobase::inplace_alter_table (this=0x64173c0a5bb0, altered_table=0x64001febd10, ha_alter_info=0x64001febc70)

    at /home/mleich/bb-10.4-thiru/storage/innobase/handler/handler0alter.cc:8470

#19 0x000055b4b2b175b2 in handler::ha_inplace_alter_table (ha_alter_info=0x64001febc70, altered_table=0x64001febd10, this=<optimized out>)

    at /home/mleich/bb-10.4-thiru/sql/handler.h:4366

#20 mysql_inplace_alter_table (thd=thd@entry=0x641740000ce8, table_list=0x641740011650, table=0x64173c0aa238,

    altered_table=altered_table@entry=0x64001febd10, ha_alter_info=ha_alter_info@entry=0x64001febc70,

    inplace_supported=inplace_supported@entry=HA_ALTER_INPLACE_COPY_NO_LOCK, target_mdl_request=0x64001fecae0, alter_ctx=0x64001fed620)

    at /home/mleich/bb-10.4-thiru/sql/sql_table.cc:7746

#21 0x000055b4b2b23313 in mysql_alter_table (thd=thd@entry=0x641740000ce8, new_db=new_db@entry=0x6417400054a8, new_name=new_name@entry=0x6417400058b0,

    create_info=create_info@entry=0x64001fee210, table_list=<optimized out>, table_list@entry=0x641740011650, alter_info=alter_info@entry=0x64001fee150,

    order_num=0, order=0x0, ignore=false) at /home/mleich/bb-10.4-thiru/sql/sql_table.cc:10156

#22 0x000055b4b2ba0d7f in Sql_cmd_alter_table::execute (this=<optimized out>, thd=0x641740000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_alter.cc:514

#23 0x000055b4b2a5e315 in mysql_execute_command (thd=thd@entry=0x641740000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:6099

#24 0x000055b4b2a602d9 in mysql_parse (thd=thd@entry=0x641740000ce8, rawbuf=<optimized out>, length=<optimized out>,

    parser_state=parser_state@entry=0x64001fef530, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false)

    at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:7899

#25 0x000055b4b2a62c75 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x641740000ce8,

    packet=packet@entry=0x6417400081a9 "ALTER TABLE `t6` ENCRYPTION_KEY_ID=33 /* E_R Thread7 QNO 1595 CON_ID 23 */ ", packet_length=packet_length@entry=75,

    is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:1833

#26 0x000055b4b2a67681 in do_command (thd=0x641740000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:1351

#27 0x000055b4b2b99aa2 in do_handle_one_connection (connect=connect@entry=0x55b4b69b9ef8) at /home/mleich/bb-10.4-thiru/sql/sql_connect.cc:1412

#28 0x000055b4b2b99bc7 in handle_one_connection (arg=0x55b4b69b9ef8) at /home/mleich/bb-10.4-thiru/sql/sql_connect.cc:1316

#29 0x00006bca0b6bc6db in start_thread (arg=0x64001ff0700) at pthread_create.c:463

#30 0x00002fd775c68a3f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

(rr) f 5

#5  buf_page_create (page_id=..., zip_size=zip_size@entry=0, mtr=mtr@entry=0x64174005c640) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0buf.cc:5616

5616			buf_block_free(free_block);

(rr) p block

$20 = (buf_block_t *) 0x2fd774fcbfb0

In t24:

=======

(rr) where

#0  buf_LRU_block_free_hashed_page (block=block@entry=0x2fd774fcbfb0) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0lru.cc:1916

#1  0x000055b4b32a962e in buf_LRU_free_page (bpage=bpage@entry=0x2fd774fcbfb0, zip=zip@entry=true)

    at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0lru.cc:1621

#2  0x000055b4b329c52f in buf_flush_LRU_list_batch (buf_pool=buf_pool@entry=0x55b4b66755d0, max=752, n=n@entry=0x47220ffb6c60)

    at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:1623

#3  0x000055b4b329c93a in buf_do_LRU_batch (buf_pool=buf_pool@entry=0x55b4b66755d0, max=max@entry=752, n=n@entry=0x47220ffb6c60)

    at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:1694

#4  0x000055b4b329cb52 in buf_flush_batch (buf_pool=buf_pool@entry=0x55b4b66755d0, flush_type=flush_type@entry=BUF_FLUSH_LRU, min_n=min_n@entry=752,

    lsn_limit=lsn_limit@entry=0, n=n@entry=0x47220ffb6c60) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:1823

#5  0x000055b4b329cd44 in buf_flush_do_batch (buf_pool=buf_pool@entry=0x55b4b66755d0, type=type@entry=BUF_FLUSH_LRU, min_n=752, lsn_limit=lsn_limit@entry=0,

    n=n@entry=0x47220ffb6c60) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:1984

#6  0x000055b4b329d12b in buf_flush_LRU_list (buf_pool=buf_pool@entry=0x55b4b66755d0) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:2246

#7  0x000055b4b329d2a4 in pc_flush_slot () at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:2767

#8  0x000055b4b329e9e3 in buf_flush_page_cleaner_coordinator () at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0flu.cc:3196

#9  0x00006bca0b6bc6db in start_thread (arg=0x47220ffb7700) at pthread_create.c:463

#10 0x00002fd775c68a3f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

After that t2 will take the page to fetch page id

==================================================

#0  buf_page_init (buf_pool=buf_pool@entry=0x55b4b66755d0, page_id=..., zip_size=zip_size@entry=0, block=block@entry=0x2fd774fcbfb0)

    at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0buf.cc:5292

#1  0x000055b4b3276b61 in buf_page_init_for_read (err=err@entry=0x247a1f2966ec, mode=mode@entry=132, page_id=..., zip_size=zip_size@entry=0,

    unzip=unzip@entry=false) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0buf.cc:5422

#2  0x000055b4b32b22af in buf_read_page_low (err=err@entry=0x247a1f2966ec, sync=sync@entry=false, type=type@entry=192, mode=mode@entry=132, page_id=...,

    zip_size=zip_size@entry=0, unzip=false, ignore_missing_space=false) at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0rea.cc:152

#3  0x000055b4b32b47bb in buf_read_page_background (page_id=..., zip_size=zip_size@entry=0, sync=sync@entry=false)

    at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0rea.cc:441

#4  0x000055b4b321b74d in btr_cur_prefetch_siblings (block=block@entry=0x2fd774fd5160) at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0cur.cc:3353

#5  0x000055b4b32380bb in btr_cur_optimistic_delete_func (cursor=cursor@entry=0x391c6807ea60, flags=flags@entry=0, mtr=mtr@entry=0x247a1f296c10)

    at /home/mleich/bb-10.4-thiru/storage/innobase/btr/btr0cur.cc:5855

#6  0x000055b4b33d5b9c in row_undo_ins_remove_clust_rec (node=node@entry=0x391c6807e9f0) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0uins.cc:167

#7  0x000055b4b33db165 in row_undo_ins (node=node@entry=0x391c6807e9f0, thr=thr@entry=0x391c680418c0)

    at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0uins.cc:587

#8  0x000055b4b3143465 in row_undo (node=node@entry=0x391c6807e9f0, thr=thr@entry=0x391c680418c0)

    at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0undo.cc:438

#9  0x000055b4b3147865 in row_undo_step (thr=thr@entry=0x391c680418c0) at /home/mleich/bb-10.4-thiru/storage/innobase/row/row0undo.cc:499

#10 0x000055b4b307fdeb in que_thr_step (thr=0x391c680418c0) at /home/mleich/bb-10.4-thiru/storage/innobase/que/que0que.cc:1037

#11 que_run_threads_low (thr=thr@entry=0x391c680418c0) at /home/mleich/bb-10.4-thiru/storage/innobase/que/que0que.cc:1101

#12 0x000055b4b30803f7 in que_run_threads (thr=0x391c680418c0) at /home/mleich/bb-10.4-thiru/storage/innobase/que/que0que.cc:1141

#13 0x000055b4b31ba6dd in trx_rollback_to_savepoint_low (trx=trx@entry=0x2fd77574b5e0, savept=savept@entry=0x0)

    at /home/mleich/bb-10.4-thiru/storage/innobase/trx/trx0roll.cc:136

#14 0x000055b4b31bbca5 in trx_rollback_for_mysql_low (trx=trx@entry=0x2fd77574b5e0) at /home/mleich/bb-10.4-thiru/storage/innobase/trx/trx0roll.cc:210

#15 0x000055b4b31bbfff in trx_rollback_for_mysql (trx=trx@entry=0x2fd77574b5e0) at /home/mleich/bb-10.4-thiru/storage/innobase/trx/trx0roll.cc:240

#16 0x000055b4b2f43031 in innobase_rollback (hton=<optimized out>, thd=0x391c68000ce8, rollback_trx=<optimized out>)

    at /home/mleich/bb-10.4-thiru/storage/innobase/handler/ha_innodb.cc:4691

#17 0x000055b4b2d1de44 in ha_rollback_trans (thd=thd@entry=0x391c68000ce8, all=all@entry=false) at /home/mleich/bb-10.4-thiru/sql/handler.cc:1886

#18 0x000055b4b2bae9c3 in trans_rollback_stmt (thd=thd@entry=0x391c68000ce8) at /home/mleich/bb-10.4-thiru/sql/transaction.cc:495

#19 0x000055b4b2a5eb05 in mysql_execute_command (thd=thd@entry=0x391c68000ce8) at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:6150

#20 0x000055b4b2a602d9 in mysql_parse (thd=thd@entry=0x391c68000ce8, rawbuf=<optimized out>, length=<optimized out>,

    parser_state=parser_state@entry=0x247a1f298530, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false)

    at /home/mleich/bb-10.4-thiru/sql/sql_parse.cc:7899

(rr) f 0

#0  buf_page_init (buf_pool=buf_pool@entry=0x55b4b66755d0, page_id=..., zip_size=zip_size@entry=0, block=block@entry=0x2fd774fcbfb0)

    at /home/mleich/bb-10.4-thiru/storage/innobase/buf/buf0buf.cc:5292

5292		buf_block_init_low(block);

(rr) p page_id

$21 = {m_space = 34, m_page_no = 294}

t6 uses block (0x2fd774fcbfb0) to create new page, but t24 frees the pages. After that t2 uses the page and initialise with different
page id. It leads to garbage block in t6.

buf_page_create() does use of freed block to removed hashed entries. InnoDB should take proper lock on block before
releasing the buffer pool mutex and hash lock.

[MDEV-23233] Race condition for btr_search_drop_page_hash_index() in buf_page_create() Created: 2020-07-20 Updated: 2021-10-08 Resolved: 2020-07-27
Status:	Closed
Project:	MariaDB Server
Component/s:	Storage Engine - InnoDB
Affects Version/s:	10.2, 10.3, 10.4, 10.5
Fix Version/s:	10.2.33, 10.3.24, 10.4.14, 10.5.5

[MDEV-23233] Race condition for btr_search_drop_page_hash_index() in buf_page_create() Created: 2020-07-20 Updated: 2021-10-08 Resolved: 2020-07-27