Segmentation fault due to illegal_instruction #10236
Description
Bug description
- OS: Linux
- OS Version: Ubuntu 22.04
- Architecture: amd64
Tarantool 3.2.0-entrypoint-124-g5208ea473b
Target: Linux-x86_64-Debug
Build options: cmake . -DCMAKE_INSTALL_PREFIX=/usr/local -DENABLE_BACKTRACE=TRUE
Compiler: GNU-11.4.0
C_FLAGS: -fexceptions -funwind-tables -fasynchronous-unwind-tables -fno-common -msse2 -Wformat -Wformat-security -Werror=format-security -fstack-protector-strong -fPIC -fmacro-prefix-map=/home/sergeyb/sources/MRG/tarantool=. -std=c11 -Wall -Wextra -Wno-gnu-alignof-expression -fno-gnu89-inline -Wno-cast-function-type -Werror -g -ggdb -O0
CXX_FLAGS: -fexceptions -funwind-tables -fasynchronous-unwind-tables -fno-common -msse2 -Wformat -Wformat-security -Werror=format-security -fstack-protector-strong -fPIC -fmacro-prefix-map=/home/sergeyb/sources/MRG/tarantool=. -std=c++11 -Wall -Wextra -Wno-invalid-offsetof -Wno-gnu-alignof-expression -Wno-cast-function-type -Werror -g -ggdb -O0
Steps to reproduce
<snipped>
2024-07-11 22:47:49.564 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> INSERT_OP [[955837212703.09,614107249897,"bbbe6731-4272-4b4c-9e81-
bbd82b1b735a",309785566062,"nxaaxgysai",329682773007,false,"800134939610","2024-07-11T19:47:49Z",[1,2],{"4":4,"8":8,"1":1,"5":5,"2":2,"6":6,"7":7,"
3":3}]]
2024-07-11 22:47:49.564 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> INDEX_COMPACT_OP [{"unique":true,"parts":[{"fieldno":5,"sort_order
":"asc","type":"string","exclude_null":false,"is_nullable":false},{"fieldno":8,"sort_order":"asc","type":"decimal","exclude_null":false,"is_nullabl
e":false},{"fieldno":7,"sort_order":"asc","type":"boolean","exclude_null":false,"is_nullable":false},{"fieldno":1,"sort_order":"asc","type":"double
","exclude_null":false,"is_nullable":false},{"fieldno":2,"sort_order":"asc","type":"unsigned","exclude_null":false,"is_nullable":false},{"fieldno":
9,"sort_order":"asc","type":"datetime","exclude_null":false,"is_nullable":false},{"fieldno":4,"sort_order":"asc","type":"integer","exclude_null":fa
lse,"is_nullable":false},{"fieldno":3,"sort_order":"asc","type":"uuid","exclude_null":false,"is_nullable":false},{"fieldno":6,"sort_order":"asc","t
ype":"number","exclude_null":false,"is_nullable":false}],"hint":true,"id":0,"type":"TREE","space_id":512,"name":"swottxqzpp"}]
2024-07-11 22:47:49.564 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> INDEX_CREATE_OP []
2024-07-11 22:47:49.564 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> ERROR: opname "INDEX_CREATE_OP", err "Can not perform index build
in a multi-statement transaction", args []
2024-07-11 22:47:49.565 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> UPSERT_OP [[539852487626.22,493701533969,"95fa1022-1865-4190-8350-
e634989274eb",16405910233,"xwsoinbkjg",207803704697,true,"238550431976","2024-07-11T19:47:49Z",[1,2],{"4":4,"1":1,"5":5,"2":2,"6":6,"7":7,"3":3}],[
["-",1,581439471202.39],["+",2,569352144117]]]
2024-07-11 22:47:49.565 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> UPDATE_OP [["faaeutfpuq","540216204531",false,633258179431.47,9949
30610047,"2024-07-11T19:47:49Z",31151757241,"31a2df0c-c232-42e2-ad4f-ab2b4105ad87",95783932642],[["=",3,"edfb941d-e286-48d7-b9d9-8fa19257cea3"]]]
2024-07-11 22:47:49.565 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> PUT_OP [[775757568035.7,942266044934,"a2daeff3-f8eb-47bc-9790-1d9e
130bd4ce",831552313452,"pwqfxpsmwc",62379394763,true,"773655652197","2024-07-11T19:47:49Z",[1,2],{"2":2,"4":4,"1":1,"3":3}]]
2024-07-11 22:47:49.566 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> BSIZE_OP []
2024-07-11 22:47:49.566 [3857891] main/855/WRK #742/test.fuzz.lua.test_engine I> TX_ROLLBACK []
Illegal instruction
Actual behavior
#0 __pthread_kill_implementation (no_tid=0, signo=6, threadid=140468859312832) at ./nptl/pthread_kill.c:44
#1 __pthread_kill_internal (signo=6, threadid=140468859312832) at ./nptl/pthread_kill.c:78
#2 __GI___pthread_kill (threadid=140468859312832, signo=signo@entry=6) at ./nptl/pthread_kill.c:89
#3 0x00007fc173442476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#4 0x00007fc1734287f3 in __GI_abort () at ./stdlib/abort.c:79
#5 0x000055c8df719f77 in crash_signal_cb (signo=11, siginfo=0x55c8e13c08f0, context=0x55c8e13c07c0)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/crash.c:203
#6 <signal handler called>
#7 0x00007fc1640301c4 in ?? ()
#8 0x000055c8df4b9d26 in index_replace (index=0x7fc0e8180730, old_tuple=0x7fc164054614, new_tuple=0x0, mode=DUP_REPLACE_OR_INSERT,
result=0x7ffe43b66110, successor=0x7ffe43b66118) at /home/sergeyb/sources/MRG/tarantool/src/box/index.h:917
#9 0x000055c8df4be673 in memtx_build_on_replace_rollback (trigger=0x7fc0d3daa430, event=0x7fc0d3daa290)
at /home/sergeyb/sources/MRG/tarantool/src/box/memtx_space.c:1145
#10 0x000055c8df74f9e2 in trigger_run_list (list=0x7ffe43b661d0, event=0x7fc0d3daa290)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/trigger.cc:100
#11 0x000055c8df74fb04 in trigger_run (list=0x7fc0d3daa308, event=0x7fc0d3daa290)
at /home/sergeyb/sources/MRG/tarantool/src/lib/core/trigger.cc:133
#12 0x000055c8df57f71a in txn_rollback_one_stmt (txn=0x7fc0d3daa038, stmt=0x7fc0d3daa290) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:362
#13 0x000055c8df580fe7 in txn_complete_fail (txn=0x7fc0d3daa038) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:744
#14 0x000055c8df581728 in txn_on_journal_write (entry=0x7fc0d3daa478) at /home/sergeyb/sources/MRG/tarantool/src/box/txn.c:829
#15 0x000055c8df5e84c2 in journal_async_complete (entry=0x7fc0d3daa478) at /home/sergeyb/sources/MRG/tarantool/src/box/journal.h:257
#16 0x000055c8df5e8f51 in tx_schedule_queue (queue=0x55c8dfeead60 <wal_writer_singleton+32>)
at /home/sergeyb/sources/MRG/tarantool/src/box/wal.c:284
#17 0x000055c8df5e9010 in tx_complete_rollback () at /home/sergeyb/sources/MRG/tarantool/src/box/wal.c:345
#18 0x000055c8df5e90af in tx_complete_batch (msg=0x7fc0d3f37680) at /home/sergeyb/sources/MRG/tarantool/src/box/wal.c:376
#19 0x000055c8df72f9e4 in cmsg_deliver (msg=0x7fc0d3f37680) at /home/sergeyb/sources/MRG/tarantool/src/lib/core/cbus.c:350
#20 0x000055c8df730374 in cbus_process (endpoint=0x55c8dfee5d40 <tx_prio_endpoint>) at /home/sergeyb/sources/MRG/tarantool/src/lib/core/cbus.c:601
#21 0x000055c8df5a8d25 in tx_prio_cb (loop=0x55c8dff303e0 <default_loop_struct>, watcher=0x55c8dfee5e90 <tx_prio_endpoint+336>, events=524288)
at /home/sergeyb/sources/MRG/tarantool/src/box/box.cc:5473
#22 0x000055c8dfb0f81f in ev_invoke_pending (loop=0x55c8dff303e0 <default_loop_struct>)
at /home/sergeyb/sources/MRG/tarantool/third_party/libev/ev.c:3797
#23 0x000055c8dfb107c5 in ev_run (loop=0x55c8dff303e0 <default_loop_struct>, flags=0)
at /home/sergeyb/sources/MRG/tarantool/third_party/libev/ev.c:4221
#24 0x000055c8df6e7c69 in tarantool_lua_run_script (path=0x55c8e13b158e "test/fuzz/lua/test_engine.lua",
instance=0x55c8dfeb08f0 <main::instance>, opt_mask=0, optc=0, optv=0x0, argc=7, argv=0x55c8e13b1538)
at /home/sergeyb/sources/MRG/tarantool/src/lua/init.c:1209
#25 0x000055c8df450d7f in main (argc=7, argv=0x55c8e13b1538) at /home/sergeyb/sources/MRG/tarantool/src/main.cc:1057#1 0x5633d2d46492 in crash_collect+256
#2 0x5633d2d46ece in crash_signal_cb+100
#3 0x7ff0cb842520 in __sigaction+80
#4 0x5633d2d4dd50 in illegal_instruction+4
#5 0x5633d2d56e7a in cord_thread_func+1783
#6 0x7ff0cb894ac3 in pthread_condattr_setpshared+1299
#7 0x7ff0cb926850 in __xmknodat+560 tarantool binary and coredump
gh-10236.zip
Expected behavior
no crash