Uploaded image for project: 'WiredTiger'
  1. WiredTiger
  2. WT-5231

SEGV while debugging cursor page during snap verify

    • Type: Icon: Bug Bug
    • Resolution: Duplicate
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None

      There's a SEGV fired while debugging cursor page during snap verify (snapshot isolation) in a stress sanitizer run on the PPC machine. 

      http://build.wiredtiger.com:8080/job/wiredtiger-test-format-stress-sanitizer-ppc/8712/

      ++ nice ./t -1 -c ../../../test/format/CONFIG.stress
      snapshot-isolation error: Dumping page to RUNDIR/pagedump
      ASAN:DEADLYSIGNAL
      =================================================================
      ==13437==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x0000101a677c bp 0x3fff76efcc80 sp 0x3fff76efcc80 T53)
      ==13437==The signal is caused by a UNKNOWN memory access.
      ==13437==Hint: address points to the zero page.
      snapshot-isolation error: Dumping page to RUNDIR/pagedump
      ASAN:DEADLYSIGNAL
      ==13437==AddressSanitizer: while reporting a bug found another one. Ignoring.
      snapshot-isolation error: Dumping page to RUNDIR/pagedump
      ASAN:DEADLYSIGNAL
      ==13437==AddressSanitizer: while reporting a bug found another one. Ignoring.
      snapshot-isolation error: Dumping page to RUNDIR/pagedump
      ASAN:DEADLYSIGNAL
      ==13437==AddressSanitizer: while reporting a bug found another one. Ignoring.
      snapshot-isolation error: Dumping page to RUNDIR/pagedump
      ASAN:DEADLYSIGNAL
      ==13437==AddressSanitizer: while reporting a bug found another one. Ignoring.
          #0 0x101a6778 in __debug_page_metadata /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/btree/bt_debug.c:783:17
          #1 0x1019ae24 in __debug_page /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/btree/bt_debug.c:736:5
          #2 0x1019abb4 in __wt_debug_page /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/btree/bt_debug.c:678:5
          #3 0x1019b5cc in __wt_debug_cursor_page /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/btree/bt_debug.c:697:13
          #4 0x101768ac in snap_verify /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/snap.c:197:5
          #5 0x10175220 in snap_repeat_txn /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/snap.c:388:13
          #6 0x1015f230 in ops /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/ops.c:946:19
          #7 0x1010dfdc in __asan::AsanThread::ThreadStart(unsigned long, __sanitizer::atomic_uintptr_t*) /home/dhows/llvm-git/projects/compiler-rt/lib/asan/asan_thread.cc:257
          #8 0x1003a7b8 in asan_thread_start(void*) /home/dhows/llvm-git/projects/compiler-rt/lib/asan/asan_interceptors.cc:305
          #9 0x3fff99678940 in start_thread (/lib64/power8/libpthread.so.0+0x8940)
          #10 0x3fff993c763c in __clone (/lib64/power8/libc.so.6+0x11763c)
      
      AddressSanitizer can not provide additional info.
      SUMMARY: AddressSanitizer: SEGV /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/btree/bt_debug.c:783:17 in __debug_page_metadata
      Thread T53 created by T0 here:
          #0 0x1003a878 in _ZN11__sanitizer18BufferedStackTraceC4Ev /home/dhows/llvm-git/projects/compiler-rt/lib/asan/asan_interceptors.cc:314
          #1 0x1003a878 in pthread_create /home/dhows/llvm-git/projects/compiler-rt/lib/asan/asan_interceptors.cc:314
          #2 0x103a231c in __wt_thread_create /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/../src/os_posix/os_thread.c:28:5
          #3 0x10158dc0 in wts_ops /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/ops.c:169:9
          #4 0x1017b21c in main /home/jenkins/jenkins/workspace/wiredtiger-test-format-stress-sanitizer-ppc/build_posix/test/format/../../../test/format/t.c:212:17
          #5 0x3fff992d457c in generic_start_main.isra.0 (/lib64/power8/libc.so.6+0x2457c)
          #6 0x3fff992d4770 in __libc_start_main (/lib64/power8/libc.so.6+0x24770)
      
      ==13437==ABORTING
      t: process 13437
      /tmp/jenkins1635854801126787247.sh: line 20: 13437 Aborted                 (core dumped) nice ./t -1 -c ../../../test/format/CONFIG.stress 

      The configuration:

      ############################################
      #  RUN PARAMETERS
      ############################################
      abort=0
      alter=0
      assert_commit_timestamp=1
      assert_read_timestamp=0
      auto_throttle=1
      backups=0
      bitcnt=3
      bloom=1
      bloom_bit_count=5
      bloom_hash_count=26
      bloom_oldest=0
      cache=128
      cache_minimum=20
      checkpoints=wiredtiger
      checkpoint_log_size=79
      checkpoint_wait=96
      checksum=uncompressed
      chunk_size=4
      compaction=0
      compression=zlib
      data_extend=0
      data_source=table
      delete_pct=5
      dictionary=0
      direct_io=0
      encryption=rotn-7
      evict_max=1
      file_type=variable-length column-store
      firstfit=0
      huffman_key=0
      huffman_value=0
      independent_thread_rng=1
      in_memory=0
      insert_pct=0
      internal_key_truncation=1
      internal_page_max=9
      isolation=snapshot
      key_gap=11
      key_max=46
      key_min=15
      leaf_page_max=17
      leak_memory=0
      logging=0
      logging_archive=1
      logging_compression=none
      logging_file_max=337147
      logging_prealloc=1
      long_running_txn=0
      lsm_worker_threads=3
      memory_page_max=4
      merge_max=7
      mmap=1
      modify_pct=0
      ops=0
      prefix_compression=1
      prefix_compression_min=5
      prepare=1
      quiet=1
      random_cursor=0
      read_pct=92
      rebalance=1
      repeat_data_pct=42
      reverse=0
      rows=1000000
      runs=1
      salvage=1
      split_pct=99
      statistics=0
      statistics_server=0
      threads=16
      timer=4
      timing_stress_aggressive_sweep=0
      timing_stress_checkpoint=0
      timing_stress_lookaside_sweep=0
      timing_stress_split_1=0
      timing_stress_split_2=0
      timing_stress_split_3=0
      timing_stress_split_4=0
      timing_stress_split_5=0
      timing_stress_split_6=0
      timing_stress_split_7=0
      timing_stress_split_8=0
      transaction_timestamps=1
      transaction-frequency=100
      truncate=1
      value_max=903
      value_min=18
      verify=1
      wiredtiger_config=
      write_pct=3
      ############################################ 

            Assignee:
            backlog-server-storage-engines [DO NOT USE] Backlog - Storage Engines Team
            Reporter:
            luke.chen@mongodb.com Luke Chen
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: