Skip to content

Segfault on reading from projection #28545

@tavplubix

Description

@tavplubix

https://clickhouse-test-reports.s3.yandex.net/28533/37cff8120559bef6d07046261f5709337459cfdd/fuzzer_debug/report.html#fail1

2021.09.02 22:31:46.488739 [ 51 ] {d1a5c7df-ad2b-4d9a-b761-62f31592129d} <Debug> executeQuery: (from [::1]:33262) SELECT min(i) FROM d WHERE 1 = (_partition_value.1) GROUP BY _partition_id ORDER BY _partition_id ASC NULLS LAST
2021.09.02 22:31:46.496902 [ 51 ] {d1a5c7df-ad2b-4d9a-b761-62f31592129d} <Trace> ContextAccess (default): Access granted: SELECT(i, _partition_id, _partition_value) ON default.d
2021.09.02 22:31:46.503066 [ 51 ] {d1a5c7df-ad2b-4d9a-b761-62f31592129d} <Trace> ContextAccess (default): Access granted: SELECT(i, _partition_id, _partition_value) ON default.d
2021.09.02 22:31:46.503258 [ 51 ] {d1a5c7df-ad2b-4d9a-b761-62f31592129d} <Debug> default.d (8f9dc948-51e5-48d7-8f9d-c94851e598d7) (SelectExecutor): Choose aggregate projection _minmax_count_projection

2021.09.02 22:31:46.504490 [ 270 ] {} <Fatal> BaseDaemon: ########################################
2021.09.02 22:31:46.504934 [ 270 ] {} <Fatal> BaseDaemon: (version 21.10.1.7982, build id: 16D0445B31E077574E7D2DE514E065822877AE84) (from thread 51) (query_id: d1a5c7df-ad2b-4d9a-b761-62f31592129d) Received signal Segmentation fault (11)
2021.09.02 22:31:46.505223 [ 270 ] {} <Fatal> BaseDaemon: Address: 0xb22c620 Access: write. Attempted access has violated the permissions assigned to the memory area.
2021.09.02 22:31:46.505500 [ 270 ] {} <Fatal> BaseDaemon: Stack trace: 0x191487f6 0x19148727 0x191452a5 0x1912d541 0x19129a11 0x1649bdc8 0x1649937e 0x1dddf208 0x1dddfdb4 0x1e4c692f 0x1e4c633c 0x201de6ba 0x202acc46 0x1ebe4b4a 0x1fa7e989 0x1fc630d5 0x1ebd6349 0x1ebcfecd 0x1ebcf206 0x1ef5e4ca 0x1ef5ee9d 0x1f208c37 0x1f206b85 0x1fde3ac9 0x1fdf1148 0x244ba1dc 0x244baa64 0x24615003 0x246118bd 0x24610648 0x7f025d38c609 0x7f025d2a2293
2021.09.02 22:31:47.128042 [ 270 ] {} <Fatal> BaseDaemon: 4. ./obj-x86_64-linux-gnu/../src/Functions/FunctionsComparison.h:119: DB::NumComparisonImpl<short, char8_t, DB::EqualsOp<short, char8_t> >::vectorConstant(DB::PODArray<short, 4096ul, Allocator<false, false>, 15ul, 16ul> const&, char8_t, DB::PODArray<char8_t, 4096ul, Allocator<false, false>, 15ul, 16ul>&) @ 0x191487f6 in /workspace/clickhouse
2021.09.02 22:31:47.740518 [ 270 ] {} <Fatal> BaseDaemon: 5. ./obj-x86_64-linux-gnu/../src/Functions/FunctionsComparison.h:128: DB::NumComparisonImpl<char8_t, short, DB::EqualsOp<char8_t, short> >::constantVector(char8_t, DB::PODArray<short, 4096ul, Allocator<false, false>, 15ul, 16ul> const&, DB::PODArray<char8_t, 4096ul, Allocator<false, false>, 15ul, 16ul>&) @ 0x19148727 in /workspace/clickhouse
2021.09.02 22:31:48.355537 [ 270 ] {} <Fatal> BaseDaemon: 6. ./obj-x86_64-linux-gnu/../src/Functions/FunctionsComparison.h:605: COW<DB::IColumn>::immutable_ptr<DB::IColumn> DB::FunctionComparison<DB::EqualsOp, DB::NameEquals>::executeNumConstRightType<char8_t, short>(DB::ColumnConst const*, DB::IColumn const*) const @ 0x191452a5 in /workspace/clickhouse
2021.09.02 22:31:48.949900 [ 270 ] {} <Fatal> BaseDaemon: 7. ./obj-x86_64-linux-gnu/../src/Functions/FunctionsComparison.h:655: COW<DB::IColumn>::immutable_ptr<DB::IColumn> DB::FunctionComparison<DB::EqualsOp, DB::NameEquals>::executeNumLeftType<char8_t>(DB::IColumn const*, DB::IColumn const*) const @ 0x1912d541 in /workspace/clickhouse
2021.09.02 22:31:49.545105 [ 270 ] {} <Fatal> BaseDaemon: 8. ./obj-x86_64-linux-gnu/../src/Functions/FunctionsComparison.h:1187: DB::FunctionComparison<DB::EqualsOp, DB::NameEquals>::executeImpl(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x19129a11 in /workspace/clickhouse
2021.09.02 22:31:49.639716 [ 270 ] {} <Fatal> BaseDaemon: 9. ./obj-x86_64-linux-gnu/../src/Functions/IFunction.h:381: DB::IFunction::executeImplDryRun(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x1649bdc8 in /workspace/clickhouse
2021.09.02 22:31:49.730740 [ 270 ] {} <Fatal> BaseDaemon: 10. ./obj-x86_64-linux-gnu/../src/Functions/IFunctionAdaptors.h:26: DB::FunctionToExecutableFunctionAdaptor::executeDryRunImpl(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x1649937e in /workspace/clickhouse
2021.09.02 22:31:50.011689 [ 270 ] {} <Fatal> BaseDaemon: 11. ./obj-x86_64-linux-gnu/../src/Functions/IFunction.cpp:215: DB::IExecutableFunction::executeWithoutLowCardinalityColumns(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x1dddf208 in /workspace/clickhouse
2021.09.02 22:31:50.294273 [ 270 ] {} <Fatal> BaseDaemon: 12. ./obj-x86_64-linux-gnu/../src/Functions/IFunction.cpp:260: DB::IExecutableFunction::execute(std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> > const&, std::__1::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x1dddfdb4 in /workspace/clickhouse
2021.09.02 22:31:52.096056 [ 270 ] {} <Fatal> BaseDaemon: 13. ./obj-x86_64-linux-gnu/../src/Interpreters/ActionsDAG.cpp:476: DB::executeActionForHeader(DB::ActionsDAG::Node const*, std::__1::vector<DB::ColumnWithTypeAndName, std::__1::allocator<DB::ColumnWithTypeAndName> >) @ 0x1e4c692f in /workspace/clickhouse
2021.09.02 22:31:53.342421 [ 270 ] {} <Fatal> BaseDaemon: 14. ./obj-x86_64-linux-gnu/../src/Interpreters/ActionsDAG.cpp:592: DB::ActionsDAG::updateHeader(DB::Block) const @ 0x1e4c633c in /workspace/clickhouse
2021.09.02 22:31:53.502896 [ 270 ] {} <Fatal> BaseDaemon: 15. ./obj-x86_64-linux-gnu/../src/Processors/Transforms/FilterTransform.cpp:36: DB::FilterTransform::transformHeader(DB::Block, DB::ActionsDAG const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, bool) @ 0x201de6ba in /workspace/clickhouse
2021.09.02 22:31:53.749814 [ 270 ] {} <Fatal> BaseDaemon: 16. ./obj-x86_64-linux-gnu/../src/Processors/QueryPlan/FilterStep.cpp:35: DB::FilterStep::FilterStep(DB::DataStream const&, std::__1::shared_ptr<DB::ActionsDAG>, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, bool) @ 0x202acc46 in /workspace/clickhouse
2021.09.02 22:31:54.944530 [ 270 ] {} <Fatal> BaseDaemon: 17. ./obj-x86_64-linux-gnu/../contrib/libcxx/include/memory:2068: std::__1::__unique_if<DB::FilterStep>::__unique_single std::__1::make_unique<DB::FilterStep, DB::DataStream const&, std::__1::shared_ptr<DB::ActionsDAG> const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, bool const&>(DB::DataStream const&, std::__1::shared_ptr<DB::ActionsDAG> const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, bool const&) @ 0x1ebe4b4a in /workspace/clickhouse
2021.09.02 22:31:55.807694 [ 270 ] {} <Fatal> BaseDaemon: 18. ./obj-x86_64-linux-gnu/../src/Storages/MergeTree/MergeTreeDataSelectExecutor.cpp:202: DB::MergeTreeDataSelectExecutor::read(std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::allocator<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > const&, std::__1::shared_ptr<DB::StorageInMemoryMetadata const> const&, DB::SelectQueryInfo const&, std::__1::shared_ptr<DB::Context const>, unsigned long, unsigned int, DB::QueryProcessingStage::Enum, std::__1::shared_ptr<std::__1::unordered_map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, long, std::__1::hash<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::equal_to<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, long> > > >) const @ 0x1fa7e989 in /workspace/clickhouse
2021.09.02 22:31:56.667943 [ 270 ] {} <Fatal> BaseDaemon: 19. ./obj-x86_64-linux-gnu/../src/Storages/StorageMergeTree.cpp:192: DB::StorageMergeTree::read(DB::QueryPlan&, std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::allocator<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > const&, std::__1::shared_ptr<DB::StorageInMemoryMetadata const> const&, DB::SelectQueryInfo&, std::__1::shared_ptr<DB::Context const>, DB::QueryProcessingStage::Enum, unsigned long, unsigned int) @ 0x1fc630d5 in /workspace/clickhouse
2021.09.02 22:31:57.708108 [ 270 ] {} <Fatal> BaseDaemon: 20. ./obj-x86_64-linux-gnu/../src/Interpreters/InterpreterSelectQuery.cpp:1988: DB::InterpreterSelectQuery::executeFetchColumns(DB::QueryProcessingStage::Enum, DB::QueryPlan&) @ 0x1ebd6349 in /workspace/clickhouse
2021.09.02 22:31:58.750909 [ 270 ] {} <Fatal> BaseDaemon: 21. ./obj-x86_64-linux-gnu/../src/Interpreters/InterpreterSelectQuery.cpp:1039: DB::InterpreterSelectQuery::executeImpl(DB::QueryPlan&, std::__1::shared_ptr<DB::IBlockInputStream> const&, std::__1::optional<DB::Pipe>) @ 0x1ebcfecd in /workspace/clickhouse
2021.09.02 22:31:59.835030 [ 270 ] {} <Fatal> BaseDaemon: 22. ./obj-x86_64-linux-gnu/../src/Interpreters/InterpreterSelectQuery.cpp:580: DB::InterpreterSelectQuery::buildQueryPlan(DB::QueryPlan&) @ 0x1ebcf206 in /workspace/clickhouse
2021.09.02 22:32:00.309595 [ 270 ] {} <Fatal> BaseDaemon: 23. ./obj-x86_64-linux-gnu/../src/Interpreters/InterpreterSelectWithUnionQuery.cpp:255: DB::InterpreterSelectWithUnionQuery::buildQueryPlan(DB::QueryPlan&) @ 0x1ef5e4ca in /workspace/clickhouse
2021.09.02 22:32:00.780310 [ 270 ] {} <Fatal> BaseDaemon: 24. ./obj-x86_64-linux-gnu/../src/Interpreters/InterpreterSelectWithUnionQuery.cpp:321: DB::InterpreterSelectWithUnionQuery::execute() @ 0x1ef5ee9d in /workspace/clickhouse
2021.09.02 22:32:01.374048 [ 270 ] {} <Fatal> BaseDaemon: 25. ./obj-x86_64-linux-gnu/../src/Interpreters/executeQuery.cpp:587: DB::executeQueryImpl(char const*, char const*, std::__1::shared_ptr<DB::Context>, bool, DB::QueryProcessingStage::Enum, bool, DB::ReadBuffer*) @ 0x1f208c37 in /workspace/clickhouse
2021.09.02 22:32:02.001547 [ 270 ] {} <Fatal> BaseDaemon: 26. ./obj-x86_64-linux-gnu/../src/Interpreters/executeQuery.cpp:948: DB::executeQuery(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::shared_ptr<DB::Context>, bool, DB::QueryProcessingStage::Enum, bool) @ 0x1f206b85 in /workspace/clickhouse
2021.09.02 22:32:02.652980 [ 270 ] {} <Fatal> BaseDaemon: 27. ./obj-x86_64-linux-gnu/../src/Server/TCPHandler.cpp:291: DB::TCPHandler::runImpl() @ 0x1fde3ac9 in /workspace/clickhouse
2021.09.02 22:32:03.363354 [ 270 ] {} <Fatal> BaseDaemon: 28. ./obj-x86_64-linux-gnu/../src/Server/TCPHandler.cpp:1659: DB::TCPHandler::run() @ 0x1fdf1148 in /workspace/clickhouse
2021.09.02 22:32:03.425125 [ 270 ] {} <Fatal> BaseDaemon: 29. ./obj-x86_64-linux-gnu/../contrib/poco/Net/src/TCPServerConnection.cpp:43: Poco::Net::TCPServerConnection::start() @ 0x244ba1dc in /workspace/clickhouse
2021.09.02 22:32:03.519835 [ 270 ] {} <Fatal> BaseDaemon: 30. ./obj-x86_64-linux-gnu/../contrib/poco/Net/src/TCPServerDispatcher.cpp:115: Poco::Net::TCPServerDispatcher::run() @ 0x244baa64 in /workspace/clickhouse
2021.09.02 22:32:03.606923 [ 270 ] {} <Fatal> BaseDaemon: 31. ./obj-x86_64-linux-gnu/../contrib/poco/Foundation/src/ThreadPool.cpp:199: Poco::PooledThread::run() @ 0x24615003 in /workspace/clickhouse
2021.09.02 22:32:03.690127 [ 270 ] {} <Fatal> BaseDaemon: 32. ./obj-x86_64-linux-gnu/../contrib/poco/Foundation/src/Thread.cpp:56: Poco::(anonymous namespace)::RunnableHolder::run() @ 0x246118bd in /workspace/clickhouse
2021.09.02 22:32:03.770962 [ 270 ] {} <Fatal> BaseDaemon: 33. ./obj-x86_64-linux-gnu/../contrib/poco/Foundation/src/Thread_POSIX.cpp:345: Poco::ThreadImpl::runnableEntry(void*) @ 0x24610648 in /workspace/clickhouse
2021.09.02 22:32:03.771386 [ 270 ] {} <Fatal> BaseDaemon: 34. start_thread @ 0x9609 in /usr/lib/x86_64-linux-gnu/libpthread-2.31.so
2021.09.02 22:32:03.771772 [ 270 ] {} <Fatal> BaseDaemon: 35. clone @ 0x122293 in /usr/lib/x86_64-linux-gnu/libc-2.31.so
2021.09.02 22:32:04.957043 [ 270 ] {} <Fatal> BaseDaemon: Calculated checksum of the binary: 02E4B17247E1EA9C8DFCB7C13854083A. There is no information about the reference checksum.

cc: @amosbird

Metadata

Metadata

Assignees

No one assigned

    Labels

    fuzzProblem found by one of the fuzzers

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions