Loading...

XML

Word

Printable

JSON

Type: Build Failure
Resolution: Duplicate
Priority: Major - P3
Fix Version/s: None
Affects Version/s: None
Component/s: DHandles
Labels:

Assigned Teams:

Storage Engines - Foundations
Sprint:
SE Foundations - Q4+ Backlog
Story Points:
None
Evergreen Project:
- wiredtiger
Failure Type:
- failed
Failing Buildvariants:
- amazon2023-arm64-asan
- ubuntu2004-asan
Failing Tasks:
- model-test-long-random-config-disagg
First Failing Revision:
- 57b822fea2369b0a34636262432b02cb0e6ba6f2(wiredtiger)
Linked BFG List:
https://buildbaron.corp.mongodb.com/ui/#/bf/WT-16626
Count of Linked BFGs (Last 30 days):
12

model-test-long-random-config-disagg on amazon2023-arm64-asan

Host: i-0f84947d41ad8f952
Project: wiredtiger
Commit: 57b822fe
Please refer to BF(G) Playbook for instructions on handling BF and BFG tickets as well as Auto-Resolution Rules

Task Logs:

task model-test-long-random-config-disagg

model-test-long-random-config-disagg task_log

Logs:

==655903==ERROR: AddressSanitizer: heap-use-after-free on address 0x5150046c9670 at pc 0xffffb3db6b9c bp 0xffffdfd6dab0 sp 0xffffdfd6daa8
READ of size 2 at 0x5150046c9670 thread T0
    #0 0xffffb3db6b98 in __txn_visible_all_id /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/include/txn_inline.h:987:5
    #1 0xffffb3d9a618 in __wt_txn_visible_all /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/include/txn_inline.h:1056:10
    #2 0xffffb3d9a0bc in __wt_txn_release_snapshot /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/txn/txn.c:102:5
    #3 0xffffb3da0fac in __wt_txn_commit /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/txn/txn.c:1561:5
    #4 0xffffb375d4ec in __curfile_insert /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/cursor/cur_file.c:405:5
    #5 0xffffb39e7080 in __wt_metadata_insert /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/meta/meta_table.c:209:5
    #6 0xffffb3b9dd34 in __create_file /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:288:9
    #7 0xffffb3b99d18 in __schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1597:15
    #8 0xffffb3b99214 in __wt_schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1657:11
    #9 0xffffb36a5934 in __layered_create_missing_ingest_table /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:98:5
    #10 0xffffb36a291c in __disagg_apply_checkpoint_meta /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:1157:25
    #11 0xffffb369f424 in __disagg_pick_up_checkpoint /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:1322:5
    #12 0xffffb36967e0 in __disagg_pick_up_checkpoint_meta /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:1401:5
    #13 0xffffb36936cc in __wti_disagg_conn_config /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:2119:17
    #14 0xffffb36cc290 in __wti_conn_reconfig /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_reconfig.c:450:13
    #15 0xffffb362d92c in __conn_reconfigure /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_api.c:1374:11
    #16 0xffffb47780d4 in model::wt_disagg_pick_up_latest_checkpoint(__wt_connection*, unsigned long&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/core/util.cpp:545:11
    #17 0xffffb4892454 in model::kv_workload_runner_wt::wiredtiger_open_nolock() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:702:26
    #18 0xffffb4896c64 in model::kv_workload_runner_wt::wiredtiger_open() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/include/model/driver/kv_workload_runner_wt.h:235:9
    #19 0xffffb488b6c4 in model::kv_workload_runner_wt::run(model::kv_workload const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:157:17
    #20 0xffffb480f964 in model::kv_workload::run_in_wiredtiger(char const*, char const*, char const*) const /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload.cpp:437:19
    #21 0xaaaab0ee6bf8 in run_and_verify(std::shared_ptr<model::kv_workload>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:143:28
    #22 0xaaaab0ee17fc in main /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:936:17
    #23 0xffffb2e62554 in __libc_start_call_main (/lib64/libc.so.6+0x30554) (BuildId: 7f46fcd5f30f2f31235144f8192c97c839732436)
    #24 0xffffb2e62638 in __libc_start_main@GLIBC_2.17 (/lib64/libc.so.6+0x30638) (BuildId: 7f46fcd5f30f2f31235144f8192c97c839732436)
    #25 0xaaaab0edeeec in _start (/data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/cmake_build/test/model/tools/model_test+0xfeeec)
0x5150046c9670 is located 496 bytes inside of 504-byte region [0x5150046c9480,0x5150046c9678)
freed by thread T9 here:
    #0 0xffffb4d07c40 in free /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_malloc_linux.cpp:52:3
    #1 0xffffb3a0e5c8 in __wt_free_int /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/os_common/os_alloc.c:274:5
    #2 0xffffb36769d4 in __conn_dhandle_destroy /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_dhandle.c:183:5
    #3 0xffffb367fda8 in __wti_conn_dhandle_discard_single /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_dhandle.c:983:9
    #4 0xffffb36dd674 in __sweep_remove_one /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:283:11
    #5 0xffffb36dba38 in __sweep_remove_handles /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:322:13
    #6 0xffffb36d7630 in __sweep_server /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:488:13
    #7 0xffffb4d056dc in asan_thread_start(void*) /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_interceptors.cpp:239:28
    #8 0x77ffffb2f2acd8  (<unknown module>)
previously allocated by thread T0 here:
    #0 0xffffb4d08064 in calloc /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_malloc_linux.cpp:75:3
    #1 0xffffb3a0c038 in __wt_calloc /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/os_common/os_alloc.c:68:14
    #2 0xffffb3673ca8 in __wt_conn_dhandle_alloc /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_dhandle.c:210:9
    #3 0xffffb3c6959c in __session_find_shared_dhandle /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_dhandle.c:875:5
    #4 0xffffb3c67d08 in __session_get_dhandle /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_dhandle.c:905:5
    #5 0xffffb3c646c4 in __wt_session_get_dhandle /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_dhandle.c:935:9
    #6 0xffffb3b9df0c in __create_file /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:310:5
    #7 0xffffb3b99d18 in __schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1597:15
    #8 0xffffb3b99214 in __wt_schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1657:11
    #9 0xffffb3beceb8 in __wt_session_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_api.c:1105:5
    #10 0xffffb3925a1c in __wt_hs_open /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/history/hs_conn.c:156:9
    #11 0xffffb36bb714 in __wti_connection_workers /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_open.c:294:5
    #12 0xffffb3625be4 in wiredtiger_open /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_api.c:3531:5
    #13 0xffffb489238c in model::kv_workload_runner_wt::wiredtiger_open_nolock() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:692:15
    #14 0xffffb4896c64 in model::kv_workload_runner_wt::wiredtiger_open() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/include/model/driver/kv_workload_runner_wt.h:235:9
    #15 0xffffb488b6c4 in model::kv_workload_runner_wt::run(model::kv_workload const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:157:17
    #16 0xffffb480f964 in model::kv_workload::run_in_wiredtiger(char const*, char const*, char const*) const /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload.cpp:437:19
    #17 0xaaaab0ee6bf8 in run_and_verify(std::shared_ptr<model::kv_workload>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:143:28
    #18 0xaaaab0ee17fc in main /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:936:17
    #19 0xffffb2e62554 in __libc_start_call_main (/lib64/libc.so.6+0x30554) (BuildId: 7f46fcd5f30f2f31235144f8192c97c839732436)
    #20 0x46ffffb2e62638  (<unknown module>)
    #21 0x58aaaab0edeeec  (<unknown module>)
Thread T9 created by T0 here:
    #0 0xffffb4cecb74 in pthread_create /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_interceptors.cpp:250:3
    #1 0xffffb3a3747c in __wt_thread_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/os_posix/os_thread.c:60:5
    #2 0xffffb36d6d58 in __wti_sweep_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:567:5
    #3 0xffffb36bb864 in __wti_connection_workers /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_open.c:310:5
    #4 0xffffb3625be4 in wiredtiger_open /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_api.c:3531:5
    #5 0xffffb489238c in model::kv_workload_runner_wt::wiredtiger_open_nolock() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:692:15
    #6 0xffffb4896c64 in model::kv_workload_runner_wt::wiredtiger_open() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/te

model-test-long-random-config-disagg task_log

Logs:

SUMMARY: AddressSanitizer: heap-use-after-free /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/include/txn_inline.h:987:5 in __txn_visible_all_id

model-test-long-random-config-disagg task_log

Logs:

Shadow bytes around the buggy address:
  0x5150046c9380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa
  0x5150046c9400: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x5150046c9480: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x5150046c9500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x5150046c9580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x5150046c9600: fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fa
  0x5150046c9680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x5150046c9700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x5150046c9780: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x5150046c9800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x5150046c9880: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

model-test-long-random-config-disagg task_log

Logs:

Failed to run the workload in WiredTiger: The workload process was terminated with signal 6

model-test-long-random-config-disagg task_log

Logs:

==656609==ERROR: AddressSanitizer: heap-use-after-free on address 0x515004ab9ff0 at pc 0xffffb3db6b9c bp 0xffffdfd6d290 sp 0xffffdfd6d288
READ of size 2 at 0x515004ab9ff0 thread T0
    #0 0xffffb3db6b98 in __txn_visible_all_id /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/include/txn_inline.h:987:5
    #1 0xffffb3d9a618 in __wt_txn_visible_all /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/include/txn_inline.h:1056:10
    #2 0xffffb3d9a0bc in __wt_txn_release_snapshot /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/txn/txn.c:102:5
    #3 0xffffb3da0fac in __wt_txn_commit /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/txn/txn.c:1561:5
    #4 0xffffb375d4ec in __curfile_insert /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/cursor/cur_file.c:405:5
    #5 0xffffb39e7080 in __wt_metadata_insert /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/meta/meta_table.c:209:5
    #6 0xffffb3b9dd34 in __create_file /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:288:9
    #7 0xffffb3b99d18 in __schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1597:15
    #8 0xffffb3b99214 in __wt_schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1657:11
    #9 0xffffb36a5934 in __layered_create_missing_ingest_table /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:98:5
    #10 0xffffb36a291c in __disagg_apply_checkpoint_meta /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:1157:25
    #11 0xffffb369f424 in __disagg_pick_up_checkpoint /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:1322:5
    #12 0xffffb36967e0 in __disagg_pick_up_checkpoint_meta /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:1401:5
    #13 0xffffb36936cc in __wti_disagg_conn_config /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_layered.c:2119:17
    #14 0xffffb36cc290 in __wti_conn_reconfig /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_reconfig.c:450:13
    #15 0xffffb362d92c in __conn_reconfigure /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_api.c:1374:11
    #16 0xffffb47780d4 in model::wt_disagg_pick_up_latest_checkpoint(__wt_connection*, unsigned long&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/core/util.cpp:545:11
    #17 0xffffb4892454 in model::kv_workload_runner_wt::wiredtiger_open_nolock() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:702:26
    #18 0xffffb4896c64 in model::kv_workload_runner_wt::wiredtiger_open() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/include/model/driver/kv_workload_runner_wt.h:235:9
    #19 0xffffb488b6c4 in model::kv_workload_runner_wt::run(model::kv_workload const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:157:17
    #20 0xffffb480f964 in model::kv_workload::run_in_wiredtiger(char const*, char const*, char const*) const /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload.cpp:437:19
    #21 0xaaaab0ee6bf8 in run_and_verify(std::shared_ptr<model::kv_workload>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:143:28
    #22 0xaaaab0eec028 in std::shared_ptr<model::kv_workload> reduce_counterexample_by_aspect<unsigned long>(reduce_counterexample_context_t&, std::shared_ptr<model::kv_workload>, char const*, std::function<bool (model::kv_workload_operation const&, unsigned long)>, std::function<unsigned long (model::kv_workload_operation const&, unsigned long)>, std::function<bool (model::kv_workload_operation const&, unsigned long)>) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:524:17
    #23 0xaaaab0eea57c in reduce_counterexample(std::shared_ptr<model::kv_workload>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:652:9
    #24 0xaaaab0ee1ae0 in main /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:942:25
    #25 0xffffb2e62554 in __libc_start_call_main (/lib64/libc.so.6+0x30554) (BuildId: 7f46fcd5f30f2f31235144f8192c97c839732436)
    #26 0xffffb2e62638 in __libc_start_main@GLIBC_2.17 (/lib64/libc.so.6+0x30638) (BuildId: 7f46fcd5f30f2f31235144f8192c97c839732436)
    #27 0xaaaab0edeeec in _start (/data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/cmake_build/test/model/tools/model_test+0xfeeec)
0x515004ab9ff0 is located 496 bytes inside of 504-byte region [0x515004ab9e00,0x515004ab9ff8)
freed by thread T9 here:
    #0 0xffffb4d07c40 in free /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_malloc_linux.cpp:52:3
    #1 0xffffb3a0e5c8 in __wt_free_int /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/os_common/os_alloc.c:274:5
    #2 0xffffb36769d4 in __conn_dhandle_destroy /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_dhandle.c:183:5
    #3 0xffffb367fda8 in __wti_conn_dhandle_discard_single /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_dhandle.c:983:9
    #4 0xffffb36dd674 in __sweep_remove_one /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:283:11
    #5 0xffffb36dba38 in __sweep_remove_handles /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:322:13
    #6 0xffffb36d7630 in __sweep_server /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_sweep.c:488:13
    #7 0xffffb4d056dc in asan_thread_start(void*) /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_interceptors.cpp:239:28
    #8 0x77ffffb2f2acd8  (<unknown module>)
previously allocated by thread T0 here:
    #0 0xffffb4d08064 in calloc /data/mci/f49c90f0be13703fc74cd438c017c2d0/toolchain-builder/tmp/build-llvm-v5.sh-WmZ/llvm-project-llvmorg/compiler-rt/lib/asan/asan_malloc_linux.cpp:75:3
    #1 0xffffb3a0c038 in __wt_calloc /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/os_common/os_alloc.c:68:14
    #2 0xffffb3673ca8 in __wt_conn_dhandle_alloc /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_dhandle.c:210:9
    #3 0xffffb3c6959c in __session_find_shared_dhandle /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_dhandle.c:875:5
    #4 0xffffb3c67d08 in __session_get_dhandle /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_dhandle.c:905:5
    #5 0xffffb3c646c4 in __wt_session_get_dhandle /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_dhandle.c:935:9
    #6 0xffffb3b9df0c in __create_file /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:310:5
    #7 0xffffb3b99d18 in __schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1597:15
    #8 0xffffb3b99214 in __wt_schema_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/schema/schema_create.c:1657:11
    #9 0xffffb3beceb8 in __wt_session_create /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/session/session_api.c:1105:5
    #10 0xffffb3925a1c in __wt_hs_open /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/history/hs_conn.c:156:9
    #11 0xffffb36bb714 in __wti_connection_workers /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_open.c:294:5
    #12 0xffffb3625be4 in wiredtiger_open /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/conn/conn_api.c:3531:5
    #13 0xffffb489238c in model::kv_workload_runner_wt::wiredtiger_open_nolock() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:692:15
    #14 0xffffb4896c64 in model::kv_workload_runner_wt::wiredtiger_open() /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/include/model/driver/kv_workload_runner_wt.h:235:9
    #15 0xffffb488b6c4 in model::kv_workload_runner_wt::run(model::kv_workload const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload_runner_wt.cpp:157:17
    #16 0xffffb480f964 in model::kv_workload::run_in_wiredtiger(char const*, char const*, char const*) const /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/src/driver/kv_workload.cpp:437:19
    #17 0xaaaab0ee6bf8 in run_and_verify(std::shared_ptr<model::kv_workload>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>> const&) /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/test/model/tools/model_test/main.cpp:143:28
    #18 0xaaaab0eec028 in std::shared_ptr<model::kv_workload> reduce_counterexample_by_aspect<unsigned long>(reduce_counterexample_context_t&, std::shared_ptr<model::kv_workload>, char const*, std::function<bool (model::kv_workload_operation const&, unsigned long)>, std::function<unsigned long (model::kv_workload_operation const&, unsigned long

model-test-long-random-config-disagg task_log

Logs:

SUMMARY: AddressSanitizer: heap-use-after-free /data/mci/890e695e088a5a466f8e09e4d499be89/wiredtiger/src/include/txn_inline.h:987:5 in __txn_visible_all_id

model-test-long-random-config-disagg task_log

Logs:

Shadow bytes around the buggy address:
  0x515004ab9d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa
  0x515004ab9d80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x515004ab9e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x515004ab9e80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x515004ab9f00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x515004ab9f80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fa
  0x515004aba000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x515004aba080: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x515004aba100: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x515004aba180: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x515004aba200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
Counterexample reduction: Round 8, remove sequences 15-29
Counterexample reduction: Failed to run the workload in WiredTiger: The workload process was terminated with signal 6

duplicates

WT-16554 Checkpoint pick-up / Oplog race leads to inconsistent metadata

Closed

Assignee:: [DO NOT USE] Backlog - Storage Engines Team
Reporter:: xgen-buildbaron-user
Votes:: 0 Vote for this issue
Watchers:: 2 Start watching this issue

Created:: Feb 06 2026 05:35:56 PM UTC
Updated:: Feb 09 2026 08:32:07 AM UTC
Resolved:: Feb 09 2026 12:21:42 AM UTC