-
Notifications
You must be signed in to change notification settings - Fork 8k
Closed
Closed
Copy link
Labels
fuzzProblem found by one of the fuzzersProblem found by one of the fuzzers
Description
Describe the bug
Crash when executing
SELECT hex(quantileDeterministicState(1,1))I used ubsan msan build from this pr #80791
How to reproduce
SELECT hex(quantileDeterministicState(1,1))Error message and/or stacktrace
2025.05.26 19:00:03.259039 [ 781352 ] {} <Fatal> BaseDaemon: ########## Short fault info ############
2025.05.26 19:00:03.259243 [ 781352 ] {} <Fatal> BaseDaemon: (version 25.6.1.1, build id: B43A5C1295AA5611E50A6A039B7F20C0DCBF7983, git hash: f1dfde7c93eb14be92c490b1f294b7acb761e0fc, architecture: x86_64) (from thread 399136) Received signal -3
2025.05.26 19:00:03.259356 [ 781352 ] {} <Fatal> BaseDaemon: Signal description: sanitizer trap
2025.05.26 19:00:03.259423 [ 781352 ] {} <Fatal> BaseDaemon: Sanitizer trap.
2025.05.26 19:00:03.259525 [ 781352 ] {} <Fatal> BaseDaemon: Stack trace: 0x000055557733bf07 0x0000555577dc96ab 0x000055555e293250 0x000055555e2a61e3 0x000055555e3b8131 0x000055555e3b69d6 0x0000555583e4c67b 0x0000555583e390c7 0x0000555583e3e03d 0x0000555583e432a6 0x000055558a55366a 0x0000555593a52ad4 0x000055557eada424 0x0000555593090d90 0x000055559310564c 0x00005555930cd493 0x00005555930d0b8d 0x000055557756bb70 0x000055557757fb06 0x000055557757f8bf 0x00005555775642a7 0x0000555577577f44 0x00007ffff7e13ac3 0x00007ffff7ea5850
2025.05.26 19:00:03.259618 [ 781352 ] {} <Fatal> BaseDaemon: ########################################
2025.05.26 19:00:03.260077 [ 781352 ] {} <Fatal> BaseDaemon: (version 25.6.1.1, build id: B43A5C1295AA5611E50A6A039B7F20C0DCBF7983, git hash: f1dfde7c93eb14be92c490b1f294b7acb761e0fc) (from thread 399136) (query_id: 011c168a-59e0-4e21-bedb-9367cb6f4ed8) (query: SELECT hex(quantileDeterministicState(1,1)), any(toTypeName(1)) FORMAT JSONEachRow
2025.05.26 19:00:03.260242 [ 781352 ] {} <Fatal> BaseDaemon: Sanitizer trap.
2025.05.26 19:00:03.260377 [ 781352 ] {} <Fatal> BaseDaemon: Stack trace: 0x000055557733bf07 0x0000555577dc96ab 0x000055555e293250 0x000055555e2a61e3 0x000055555e3b8131 0x000055555e3b69d6 0x0000555583e4c67b 0x0000555583e390c7 0x0000555583e3e03d 0x0000555583e432a6 0x000055558a55366a 0x0000555593a52ad4 0x000055557eada424 0x0000555593090d90 0x000055559310564c 0x00005555930cd493 0x00005555930d0b8d 0x000055557756bb70 0x000055557757fb06 0x000055557757f8bf 0x00005555775642a7 0x0000555577577f44 0x00007ffff7e13ac3 0x00007ffff7ea5850
2025.05.26 19:00:03.800019 [ 781352 ] {} <Fatal> BaseDaemon: 0.0. inlined from ./ci/tmp/build/./src/Common/StackTrace.cpp:389: StackTrace::tryCapture()
2025.05.26 19:00:03.800280 [ 781352 ] {} <Fatal> BaseDaemon: 0. ./ci/tmp/build/./src/Common/StackTrace.cpp:61: StackTrace::StackTrace() @ 0x0000000021de7f07
2025.05.26 19:00:04.752047 [ 781352 ] {} <Fatal> BaseDaemon: 1. ./ci/tmp/build/./src/Common/SignalHandlers.cpp:212: sanitizerDeathCallback() @ 0x00000000228756ab
2025.05.26 19:00:10.573679 [ 781352 ] {} <Fatal> BaseDaemon: 2. __sanitizer::Die() @ 0x0000000008d3f250
2025.05.26 19:00:11.292213 [ 781352 ] {} <Fatal> BaseDaemon: 3. ? @ 0x0000000008d521e3
2025.05.26 19:00:11.940770 [ 781352 ] {} <Fatal> BaseDaemon: 4. DB::EncodeToBinaryRepresentation<DB::HexImpl>::tryExecuteString(DB::IColumn const*, COW<DB::IColumn>::immutable_ptr<DB::IColumn>&) const @ 0x0000000008e64131
2025.05.26 19:00:12.459160 [ 781352 ] {} <Fatal> BaseDaemon: 5. DB::EncodeToBinaryRepresentation<DB::HexImpl>::executeImpl(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x0000000008e629d6
2025.05.26 19:00:12.558394 [ 781352 ] {} <Fatal> BaseDaemon: 6. ./ci/tmp/build/./src/Functions/IFunctionAdaptors.cpp:10: DB::FunctionToExecutableFunctionAdaptor::executeImpl(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x000000002e8f867b
2025.05.26 19:00:13.096905 [ 781352 ] {} <Fatal> BaseDaemon: 7. DB::IExecutableFunction::executeWithoutLowCardinalityColumns(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x000000002e8e50c7
2025.05.26 19:00:13.431595 [ 781352 ] {} <Fatal> BaseDaemon: 8. DB::IExecutableFunction::executeWithoutSparseColumns(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x000000002e8ea03d
2025.05.26 19:00:13.772672 [ 781352 ] {} <Fatal> BaseDaemon: 9. DB::IExecutableFunction::execute(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x000000002e8ef2a6
2025.05.26 19:00:15.737820 [ 781352 ] {} <Fatal> BaseDaemon: 10.0. inlined from ./ci/tmp/build/./src/Interpreters/ExpressionActions.cpp:642: DB::executeAction(DB::ExpressionActions::Action const&, DB::(anonymous namespace)::ExecutionContext&, bool, bool)
2025.05.26 19:00:15.738429 [ 781352 ] {} <Fatal> BaseDaemon: 10. ./ci/tmp/build/./src/Interpreters/ExpressionActions.cpp:781: DB::ExpressionActions::execute(DB::Block&, unsigned long&, bool, bool) const @ 0x0000000034fff66a
2025.05.26 19:00:16.037539 [ 781352 ] {} <Fatal> BaseDaemon: 11. ./ci/tmp/build/./src/Processors/Transforms/ExpressionTransform.cpp:25: DB::ExpressionTransform::transform(DB::Chunk&) @ 0x000000003e4fead4
2025.05.26 19:00:16.624763 [ 781352 ] {} <Fatal> BaseDaemon: 12. ./src/Processors/ISimpleTransform.h:33: DB::ISimpleTransform::transform(DB::Chunk&, DB::Chunk&) @ 0x0000000029586424
2025.05.26 19:00:17.037776 [ 781352 ] {} <Fatal> BaseDaemon: 13. ./ci/tmp/build/./src/Processors/ISimpleTransform.cpp:90: DB::ISimpleTransform::work() @ 0x000000003db3cd90
2025.05.26 19:00:17.218076 [ 781352 ] {} <Fatal> BaseDaemon: 14.0. inlined from ./ci/tmp/build/./src/Processors/Executors/ExecutionThreadContext.cpp:53: DB::executeJob(DB::ExecutingGraph::Node*, DB::ReadProgressCallback*)
2025.05.26 19:00:17.218219 [ 781352 ] {} <Fatal> BaseDaemon: 14. ./ci/tmp/build/./src/Processors/Executors/ExecutionThreadContext.cpp:102: DB::ExecutionThreadContext::executeTask() @ 0x000000003dbb164c
2025.05.26 19:00:17.828714 [ 781352 ] {} <Fatal> BaseDaemon: 15. ./ci/tmp/build/./src/Processors/Executors/PipelineExecutor.cpp:305: DB::PipelineExecutor::executeStepImpl(unsigned long, std::atomic<bool>*) @ 0x000000003db79493
2025.05.26 19:00:18.428875 [ 781352 ] {} <Fatal> BaseDaemon: 16.0. inlined from ./ci/tmp/build/./src/Processors/Executors/PipelineExecutor.cpp:275: DB::PipelineExecutor::executeSingleThread(unsigned long)
2025.05.26 19:00:18.429252 [ 781352 ] {} <Fatal> BaseDaemon: 16.1. inlined from ./ci/tmp/build/./src/Processors/Executors/PipelineExecutor.cpp:467: operator()
2025.05.26 19:00:18.429468 [ 781352 ] {} <Fatal> BaseDaemon: 16.2. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:149: decltype(std::declval<DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&>()()) std::__invoke[abi:ne190107]<DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&>(DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&)
2025.05.26 19:00:18.429621 [ 781352 ] {} <Fatal> BaseDaemon: 16.3. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:224: void std::__invoke_void_return_wrapper<void, true>::__call[abi:ne190107]<DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&>(DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&)
2025.05.26 19:00:18.429700 [ 781352 ] {} <Fatal> BaseDaemon: 16.4. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:210: ?
2025.05.26 19:00:18.429785 [ 781352 ] {} <Fatal> BaseDaemon: 16. ./contrib/llvm-project/libcxx/include/__functional/function.h:610: ? @ 0x000000003db7cb8d
2025.05.26 19:00:19.073956 [ 781352 ] {} <Fatal> BaseDaemon: 17.0. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:716: ?
2025.05.26 19:00:19.074097 [ 781352 ] {} <Fatal> BaseDaemon: 17.1. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:989: ?
2025.05.26 19:00:19.074175 [ 781352 ] {} <Fatal> BaseDaemon: 17. ./ci/tmp/build/./src/Common/ThreadPool.cpp:799: ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::worker() @ 0x0000000022017b70
2025.05.26 19:00:19.572103 [ 781352 ] {} <Fatal> BaseDaemon: 18.0. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:117: decltype(*std::declval<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&>().*std::declval<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)()>()()) std::__invoke[abi:ne190107]<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&, void>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&)
2025.05.26 19:00:19.572376 [ 781352 ] {} <Fatal> BaseDaemon: 18.1. inlined from ./contrib/llvm-project/libcxx/include/tuple:1354: decltype(auto) std::__apply_tuple_impl[abi:ne190107]<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&, 0ul>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&, std::__tuple_indices<0ul>)
2025.05.26 19:00:19.572522 [ 781352 ] {} <Fatal> BaseDaemon: 18.2. inlined from ./contrib/llvm-project/libcxx/include/tuple:1358: decltype(auto) std::apply[abi:ne190107]<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&)
2025.05.26 19:00:19.572614 [ 781352 ] {} <Fatal> BaseDaemon: 18. ./src/Common/ThreadPool.h:312: ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()::operator()() @ 0x000000002202bb06
2025.05.26 19:00:20.074849 [ 781352 ] {} <Fatal> BaseDaemon: 19.0. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:149: decltype(std::declval<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)()>()(std::declval<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>())) std::__invoke[abi:ne190107]<ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()&>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)
2025.05.26 19:00:20.075140 [ 781352 ] {} <Fatal> BaseDaemon: 19.1. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:224: void std::__invoke_void_return_wrapper<void, true>::__call[abi:ne190107]<ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()&>(ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()&)
2025.05.26 19:00:20.075250 [ 781352 ] {} <Fatal> BaseDaemon: 19.2. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:210: ?
2025.05.26 19:00:20.075319 [ 781352 ] {} <Fatal> BaseDaemon: 19. ./contrib/llvm-project/libcxx/include/__functional/function.h:610: ? @ 0x000000002202b8bf
2025.05.26 19:00:20.324455 [ 781352 ] {} <Fatal> BaseDaemon: 20.0. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:716: ?
2025.05.26 19:00:20.324600 [ 781352 ] {} <Fatal> BaseDaemon: 20.1. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:989: ?
2025.05.26 19:00:20.324680 [ 781352 ] {} <Fatal> BaseDaemon: 20. ./ci/tmp/build/./src/Common/ThreadPool.cpp:809: ThreadPoolImpl<std::thread>::ThreadFromThreadPool::worker() @ 0x00000000220102a7
2025.05.26 19:00:21.115268 [ 781352 ] {} <Fatal> BaseDaemon: 21.0. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:117: decltype(*std::declval<ThreadPoolImpl<std::thread>::ThreadFromThreadPool*>().*std::declval<void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)()>()()) std::__invoke[abi:ne190107]<void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*, void>(void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*&&)
2025.05.26 19:00:21.115494 [ 781352 ] {} <Fatal> BaseDaemon: 21.1. inlined from ./contrib/llvm-project/libcxx/include/__thread/thread.h:192: void std::__thread_execute[abi:ne190107]<std::unique_ptr<std::__thread_struct, std::default_delete<std::__thread_struct>>, void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*, 2ul>(std::tuple<std::unique_ptr<std::__thread_struct, std::default_delete<std::__thread_struct>>, void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*>&, std::__tuple_indices<2ul>)
2025.05.26 19:00:21.115591 [ 781352 ] {} <Fatal> BaseDaemon: 21. ./contrib/llvm-project/libcxx/include/__thread/thread.h:201: void* std::__thread_proxy[abi:ne190107]<std::tuple<std::unique_ptr<std::__thread_struct, std::default_delete<std::__thread_struct>>, void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*>>(void*) @ 0x0000000022023f44
2025.05.26 19:00:21.115841 [ 781352 ] {} <Fatal> BaseDaemon: 22. ? @ 0x0000000000094ac3
2025.05.26 19:00:21.115925 [ 781352 ] {} <Fatal> BaseDaemon: 23. ? @ 0x0000000000126850
2025.05.26 19:00:21.116006 [ 781352 ] {} <Fatal> BaseDaemon: Integrity check of the executable skipped because the reference checksum could not be read.
2025.05.26 19:00:21.116435 [ 781352 ] {} <Fatal> BaseDaemon: Changed settings: use_uncompressed_cache = false, load_balancing = 'random', allow_suspicious_low_cardinality_types = true, max_memory_usage = 10000000000, parallel_replicas_for_cluster_engines = false, min_os_cpu_wait_time_ratio_to_throw = 10., max_os_cpu_wait_time_ratio_to_throw = 20.
Metadata
Metadata
Assignees
Labels
fuzzProblem found by one of the fuzzersProblem found by one of the fuzzers