Thanks to visit codestin.com
Credit goes to github.com

Skip to content

hex(quantileDeterministicState(1,1)) crashes server that is built with msan #80862

@alsugiliazova

Description

@alsugiliazova

Describe the bug

Crash when executing

SELECT hex(quantileDeterministicState(1,1))

I used ubsan msan build from this pr #80791

How to reproduce

SELECT hex(quantileDeterministicState(1,1))

Error message and/or stacktrace

2025.05.26 19:00:03.259039 [ 781352 ] {} <Fatal> BaseDaemon: ########## Short fault info ############
2025.05.26 19:00:03.259243 [ 781352 ] {} <Fatal> BaseDaemon: (version 25.6.1.1, build id: B43A5C1295AA5611E50A6A039B7F20C0DCBF7983, git hash: f1dfde7c93eb14be92c490b1f294b7acb761e0fc, architecture: x86_64) (from thread 399136) Received signal -3
2025.05.26 19:00:03.259356 [ 781352 ] {} <Fatal> BaseDaemon: Signal description: sanitizer trap
2025.05.26 19:00:03.259423 [ 781352 ] {} <Fatal> BaseDaemon: Sanitizer trap.
2025.05.26 19:00:03.259525 [ 781352 ] {} <Fatal> BaseDaemon: Stack trace: 0x000055557733bf07 0x0000555577dc96ab 0x000055555e293250 0x000055555e2a61e3 0x000055555e3b8131 0x000055555e3b69d6 0x0000555583e4c67b 0x0000555583e390c7 0x0000555583e3e03d 0x0000555583e432a6 0x000055558a55366a 0x0000555593a52ad4 0x000055557eada424 0x0000555593090d90 0x000055559310564c 0x00005555930cd493 0x00005555930d0b8d 0x000055557756bb70 0x000055557757fb06 0x000055557757f8bf 0x00005555775642a7 0x0000555577577f44 0x00007ffff7e13ac3 0x00007ffff7ea5850
2025.05.26 19:00:03.259618 [ 781352 ] {} <Fatal> BaseDaemon: ########################################
2025.05.26 19:00:03.260077 [ 781352 ] {} <Fatal> BaseDaemon: (version 25.6.1.1, build id: B43A5C1295AA5611E50A6A039B7F20C0DCBF7983, git hash: f1dfde7c93eb14be92c490b1f294b7acb761e0fc) (from thread 399136) (query_id: 011c168a-59e0-4e21-bedb-9367cb6f4ed8) (query: SELECT hex(quantileDeterministicState(1,1)), any(toTypeName(1)) FORMAT JSONEachRow
2025.05.26 19:00:03.260242 [ 781352 ] {} <Fatal> BaseDaemon: Sanitizer trap.
2025.05.26 19:00:03.260377 [ 781352 ] {} <Fatal> BaseDaemon: Stack trace: 0x000055557733bf07 0x0000555577dc96ab 0x000055555e293250 0x000055555e2a61e3 0x000055555e3b8131 0x000055555e3b69d6 0x0000555583e4c67b 0x0000555583e390c7 0x0000555583e3e03d 0x0000555583e432a6 0x000055558a55366a 0x0000555593a52ad4 0x000055557eada424 0x0000555593090d90 0x000055559310564c 0x00005555930cd493 0x00005555930d0b8d 0x000055557756bb70 0x000055557757fb06 0x000055557757f8bf 0x00005555775642a7 0x0000555577577f44 0x00007ffff7e13ac3 0x00007ffff7ea5850
2025.05.26 19:00:03.800019 [ 781352 ] {} <Fatal> BaseDaemon: 0.0. inlined from ./ci/tmp/build/./src/Common/StackTrace.cpp:389: StackTrace::tryCapture()
2025.05.26 19:00:03.800280 [ 781352 ] {} <Fatal> BaseDaemon: 0. ./ci/tmp/build/./src/Common/StackTrace.cpp:61: StackTrace::StackTrace() @ 0x0000000021de7f07
2025.05.26 19:00:04.752047 [ 781352 ] {} <Fatal> BaseDaemon: 1. ./ci/tmp/build/./src/Common/SignalHandlers.cpp:212: sanitizerDeathCallback() @ 0x00000000228756ab
2025.05.26 19:00:10.573679 [ 781352 ] {} <Fatal> BaseDaemon: 2. __sanitizer::Die() @ 0x0000000008d3f250
2025.05.26 19:00:11.292213 [ 781352 ] {} <Fatal> BaseDaemon: 3. ? @ 0x0000000008d521e3
2025.05.26 19:00:11.940770 [ 781352 ] {} <Fatal> BaseDaemon: 4. DB::EncodeToBinaryRepresentation<DB::HexImpl>::tryExecuteString(DB::IColumn const*, COW<DB::IColumn>::immutable_ptr<DB::IColumn>&) const @ 0x0000000008e64131
2025.05.26 19:00:12.459160 [ 781352 ] {} <Fatal> BaseDaemon: 5. DB::EncodeToBinaryRepresentation<DB::HexImpl>::executeImpl(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x0000000008e629d6
2025.05.26 19:00:12.558394 [ 781352 ] {} <Fatal> BaseDaemon: 6. ./ci/tmp/build/./src/Functions/IFunctionAdaptors.cpp:10: DB::FunctionToExecutableFunctionAdaptor::executeImpl(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long) const @ 0x000000002e8f867b
2025.05.26 19:00:13.096905 [ 781352 ] {} <Fatal> BaseDaemon: 7. DB::IExecutableFunction::executeWithoutLowCardinalityColumns(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x000000002e8e50c7
2025.05.26 19:00:13.431595 [ 781352 ] {} <Fatal> BaseDaemon: 8. DB::IExecutableFunction::executeWithoutSparseColumns(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x000000002e8ea03d
2025.05.26 19:00:13.772672 [ 781352 ] {} <Fatal> BaseDaemon: 9. DB::IExecutableFunction::execute(std::vector<DB::ColumnWithTypeAndName, std::allocator<DB::ColumnWithTypeAndName>> const&, std::shared_ptr<DB::IDataType const> const&, unsigned long, bool) const @ 0x000000002e8ef2a6
2025.05.26 19:00:15.737820 [ 781352 ] {} <Fatal> BaseDaemon: 10.0. inlined from ./ci/tmp/build/./src/Interpreters/ExpressionActions.cpp:642: DB::executeAction(DB::ExpressionActions::Action const&, DB::(anonymous namespace)::ExecutionContext&, bool, bool)
2025.05.26 19:00:15.738429 [ 781352 ] {} <Fatal> BaseDaemon: 10. ./ci/tmp/build/./src/Interpreters/ExpressionActions.cpp:781: DB::ExpressionActions::execute(DB::Block&, unsigned long&, bool, bool) const @ 0x0000000034fff66a
2025.05.26 19:00:16.037539 [ 781352 ] {} <Fatal> BaseDaemon: 11. ./ci/tmp/build/./src/Processors/Transforms/ExpressionTransform.cpp:25: DB::ExpressionTransform::transform(DB::Chunk&) @ 0x000000003e4fead4
2025.05.26 19:00:16.624763 [ 781352 ] {} <Fatal> BaseDaemon: 12. ./src/Processors/ISimpleTransform.h:33: DB::ISimpleTransform::transform(DB::Chunk&, DB::Chunk&) @ 0x0000000029586424
2025.05.26 19:00:17.037776 [ 781352 ] {} <Fatal> BaseDaemon: 13. ./ci/tmp/build/./src/Processors/ISimpleTransform.cpp:90: DB::ISimpleTransform::work() @ 0x000000003db3cd90
2025.05.26 19:00:17.218076 [ 781352 ] {} <Fatal> BaseDaemon: 14.0. inlined from ./ci/tmp/build/./src/Processors/Executors/ExecutionThreadContext.cpp:53: DB::executeJob(DB::ExecutingGraph::Node*, DB::ReadProgressCallback*)
2025.05.26 19:00:17.218219 [ 781352 ] {} <Fatal> BaseDaemon: 14. ./ci/tmp/build/./src/Processors/Executors/ExecutionThreadContext.cpp:102: DB::ExecutionThreadContext::executeTask() @ 0x000000003dbb164c
2025.05.26 19:00:17.828714 [ 781352 ] {} <Fatal> BaseDaemon: 15. ./ci/tmp/build/./src/Processors/Executors/PipelineExecutor.cpp:305: DB::PipelineExecutor::executeStepImpl(unsigned long, std::atomic<bool>*) @ 0x000000003db79493
2025.05.26 19:00:18.428875 [ 781352 ] {} <Fatal> BaseDaemon: 16.0. inlined from ./ci/tmp/build/./src/Processors/Executors/PipelineExecutor.cpp:275: DB::PipelineExecutor::executeSingleThread(unsigned long)
2025.05.26 19:00:18.429252 [ 781352 ] {} <Fatal> BaseDaemon: 16.1. inlined from ./ci/tmp/build/./src/Processors/Executors/PipelineExecutor.cpp:467: operator()
2025.05.26 19:00:18.429468 [ 781352 ] {} <Fatal> BaseDaemon: 16.2. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:149: decltype(std::declval<DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&>()()) std::__invoke[abi:ne190107]<DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&>(DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&)
2025.05.26 19:00:18.429621 [ 781352 ] {} <Fatal> BaseDaemon: 16.3. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:224: void std::__invoke_void_return_wrapper<void, true>::__call[abi:ne190107]<DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&>(DB::PipelineExecutor::spawnThreadsImpl(std::shared_ptr<DB::IAcquiredSlot>)::$_0&)
2025.05.26 19:00:18.429700 [ 781352 ] {} <Fatal> BaseDaemon: 16.4. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:210: ?
2025.05.26 19:00:18.429785 [ 781352 ] {} <Fatal> BaseDaemon: 16. ./contrib/llvm-project/libcxx/include/__functional/function.h:610: ? @ 0x000000003db7cb8d
2025.05.26 19:00:19.073956 [ 781352 ] {} <Fatal> BaseDaemon: 17.0. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:716: ?
2025.05.26 19:00:19.074097 [ 781352 ] {} <Fatal> BaseDaemon: 17.1. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:989: ?
2025.05.26 19:00:19.074175 [ 781352 ] {} <Fatal> BaseDaemon: 17. ./ci/tmp/build/./src/Common/ThreadPool.cpp:799: ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::worker() @ 0x0000000022017b70
2025.05.26 19:00:19.572103 [ 781352 ] {} <Fatal> BaseDaemon: 18.0. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:117: decltype(*std::declval<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&>().*std::declval<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)()>()()) std::__invoke[abi:ne190107]<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&, void>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&)
2025.05.26 19:00:19.572376 [ 781352 ] {} <Fatal> BaseDaemon: 18.1. inlined from ./contrib/llvm-project/libcxx/include/tuple:1354: decltype(auto) std::__apply_tuple_impl[abi:ne190107]<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&, 0ul>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&, std::__tuple_indices<0ul>)
2025.05.26 19:00:19.572522 [ 781352 ] {} <Fatal> BaseDaemon: 18.2. inlined from ./contrib/llvm-project/libcxx/include/tuple:1358: decltype(auto) std::apply[abi:ne190107]<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&)(), std::tuple<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>&)
2025.05.26 19:00:19.572614 [ 781352 ] {} <Fatal> BaseDaemon: 18. ./src/Common/ThreadPool.h:312: ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()::operator()() @ 0x000000002202bb06
2025.05.26 19:00:20.074849 [ 781352 ] {} <Fatal> BaseDaemon: 19.0. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:149: decltype(std::declval<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)()>()(std::declval<ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>())) std::__invoke[abi:ne190107]<ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()&>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)
2025.05.26 19:00:20.075140 [ 781352 ] {} <Fatal> BaseDaemon: 19.1. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:224: void std::__invoke_void_return_wrapper<void, true>::__call[abi:ne190107]<ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()&>(ThreadFromGlobalPoolImpl<false, true>::ThreadFromGlobalPoolImpl<void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*>(void (ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<ThreadFromGlobalPoolImpl<false, true>>::ThreadFromThreadPool*&&)::'lambda'()&)
2025.05.26 19:00:20.075250 [ 781352 ] {} <Fatal> BaseDaemon: 19.2. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:210: ?
2025.05.26 19:00:20.075319 [ 781352 ] {} <Fatal> BaseDaemon: 19. ./contrib/llvm-project/libcxx/include/__functional/function.h:610: ? @ 0x000000002202b8bf
2025.05.26 19:00:20.324455 [ 781352 ] {} <Fatal> BaseDaemon: 20.0. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:716: ?
2025.05.26 19:00:20.324600 [ 781352 ] {} <Fatal> BaseDaemon: 20.1. inlined from ./contrib/llvm-project/libcxx/include/__functional/function.h:989: ?
2025.05.26 19:00:20.324680 [ 781352 ] {} <Fatal> BaseDaemon: 20. ./ci/tmp/build/./src/Common/ThreadPool.cpp:809: ThreadPoolImpl<std::thread>::ThreadFromThreadPool::worker() @ 0x00000000220102a7
2025.05.26 19:00:21.115268 [ 781352 ] {} <Fatal> BaseDaemon: 21.0. inlined from ./contrib/llvm-project/libcxx/include/__type_traits/invoke.h:117: decltype(*std::declval<ThreadPoolImpl<std::thread>::ThreadFromThreadPool*>().*std::declval<void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)()>()()) std::__invoke[abi:ne190107]<void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*, void>(void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*&&)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*&&)
2025.05.26 19:00:21.115494 [ 781352 ] {} <Fatal> BaseDaemon: 21.1. inlined from ./contrib/llvm-project/libcxx/include/__thread/thread.h:192: void std::__thread_execute[abi:ne190107]<std::unique_ptr<std::__thread_struct, std::default_delete<std::__thread_struct>>, void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*, 2ul>(std::tuple<std::unique_ptr<std::__thread_struct, std::default_delete<std::__thread_struct>>, void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*>&, std::__tuple_indices<2ul>)
2025.05.26 19:00:21.115591 [ 781352 ] {} <Fatal> BaseDaemon: 21. ./contrib/llvm-project/libcxx/include/__thread/thread.h:201: void* std::__thread_proxy[abi:ne190107]<std::tuple<std::unique_ptr<std::__thread_struct, std::default_delete<std::__thread_struct>>, void (ThreadPoolImpl<std::thread>::ThreadFromThreadPool::*)(), ThreadPoolImpl<std::thread>::ThreadFromThreadPool*>>(void*) @ 0x0000000022023f44
2025.05.26 19:00:21.115841 [ 781352 ] {} <Fatal> BaseDaemon: 22. ? @ 0x0000000000094ac3
2025.05.26 19:00:21.115925 [ 781352 ] {} <Fatal> BaseDaemon: 23. ? @ 0x0000000000126850
2025.05.26 19:00:21.116006 [ 781352 ] {} <Fatal> BaseDaemon: Integrity check of the executable skipped because the reference checksum could not be read.
2025.05.26 19:00:21.116435 [ 781352 ] {} <Fatal> BaseDaemon: Changed settings: use_uncompressed_cache = false, load_balancing = 'random', allow_suspicious_low_cardinality_types = true, max_memory_usage = 10000000000, parallel_replicas_for_cluster_engines = false, min_os_cpu_wait_time_ratio_to_throw = 10., max_os_cpu_wait_time_ratio_to_throw = 20.

Metadata

Metadata

Assignees

Labels

fuzzProblem found by one of the fuzzers

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions