Hi,
Ubuntu 18.04, mongodb version 1:3.6.3-0ubuntu1
Running this command makes mongodb crash :
> db.runCommand({ mapreduce: "<collection>", map: " function() { var k = emitKey; emit(k+'@'+NumberInt(this.t/86400), this.c); }", reduce: "function(key, values) { return Array.sum(values); }", out: { inline: 1 }, query: { k: { $regex: "^16m:16o:j1:1ni:.+" } }, scope: { emitKey: "16m:16o:j1:1ni:*" } })
I can provide a dump of the collection for reproducibility.
Stacktrace :
2020-04-23T07:01:03.777+0000 F - [conn428] Invalid access at address: 0
2020-04-23T07:01:03.793+0000 F - [conn428] Got signal: 11 (Segmentation fault).
0x55f760d5e4ca 0x55f760d5d78e 0x55f760d5dddc 0x55f75fed35e6 0x7f57d0c2d890 0x55f7603a89b0 0x55f760393fd6 0x55f7603ae07b 0x55f7603ae74d 0x55f7603af390 0x55f76018eac6 0x55f76039e47a 0x55f7601cd585 0x55f7601ce2dd 0x55f7600dfd24 0x55f7600e1cef 0x55f7600f186e 0x55f7600eae5e 0x55f7600ee5fd 0x55f7600fed39 0x3698771d926d
----- BEGIN BACKTRACE -----
{"backtrace":[{"b":"55F75ED23000","o":"203B4CA","s":"_ZN5mongo15printStackTraceERSo"},{"b":"55F75ED23000","o":"203A78E"},{"b":"55F75ED23000","o":"203ADDC"},{"b":"55F75ED23000","o":"11B05E6"},{"b":"7F57D0C1B000","o":"12890"},{"b":"55F75ED23000","o":"16859B0","s":"_ZN2js14TenuringTracer8traverseI8JSObjectEEvPPT_"},{"b":"55F75ED23000","o":"1670FD6","s":"_ZN2js8frontend9ObjectBox5traceEP8JSTracer"},{"b":"55F75ED23000","o":"168B07B","s":"_ZN2JS12AutoGCRooter8traceAllEP8JSTracer"},{"b":"55F75ED23000","o":"168B74D","s":"_ZN2js2gc9GCRuntime11markRuntimeEP8JSTracerNS1_18TraceOrMarkRuntimeE"},{"b":"55F75ED23000","o":"168C390","s":"_ZN2js7Nursery7collectEP9JSRuntimeN2JS8gcreason6ReasonEPN7mozilla6VectorIPNS_11ObjectGroupELm0ENS_17SystemAllocPolicyEEE"},{"b":"55F75ED23000","o":"146BAC6","s":"_ZN2js2gc9GCRuntime7minorGCEP9JSContextN2JS8gcreason6ReasonE"},{"b":"55F75ED23000","o":"167B47A","s":"_ZN2js8AllocateI8JSObjectLNS_7AllowGCE1EEEPS1_PNS_16ExclusiveContextENS_2gc9AllocKindEmNS6_11InitialHeapEPKNS_5ClassE"},{"b":"55F75ED23000","o":"14AA585"},{"b":"55F75ED23000","o":"14AB2DD","s":"_ZN2js29NewObjectWithClassProtoCommonEPNS_16ExclusiveContextEPKNS_5ClassEN2JS6HandleIP8JSObjectEENS_2gc9AllocKindENS_13NewObjectKindE"},{"b":"55F75ED23000","o":"13BCD24"},{"b":"55F75ED23000","o":"13BECEF"},{"b":"55F75ED23000","o":"13CE86E"},{"b":"55F75ED23000","o":"13C7E5E"},{"b":"55F75ED23000","o":"13CB5FD"},{"b":"55F75ED23000","o":"13DBD39"},{"b":"0","o":"3698771D926D"}],"processInfo":{ "mongodbVersion" : "3.6.3", "gitVersion" : "9586e557d54ef70f9ca4b43c26892cd55257e1a5", "compiledModules" : [], "uname" : { "sysname" : "Linux", "release" : "4.15.0-88-generic", "version" : "#88-Ubuntu SMP Tue Feb 11 20:11:34 UTC 2020", "machine" : "x86_64" }, "somap" : [ { "b" : "55F75ED23000", "elfType" : 3, "buildId" : "40A22A63C3F04AF7F9D3983994C20023104C5804" }, { "b" : "7FFDABFF9000", "path" : "linux-vdso.so.1", "elfType" : 3, "buildId" : "9478314FB21D71BAA43D3A46B2748A2F95E9C011" }, { "b" : "7F57D36B0000", "path" : "/usr/lib/x86_64-linux-gnu/libstemmer.so.0d", "elfType" : 3, "buildId" : "278CA72E21C11FF2E15A86B0B2C13A8922951702" }, { "b" : "7F57D3493000", "path" : "/lib/x86_64-linux-gnu/libz.so.1", "elfType" : 3, "buildId" : "EF3E006DFE3132A41D4D4DC0E407D6EA658E11C4" }, { "b" : "7F57D328B000", "path" : "/usr/lib/x86_64-linux-gnu/libsnappy.so.1", "elfType" : 3, "buildId" : "55765D88D03CC928130D788F1C7E4BF8415AC7E3" }, { "b" : "7F57D3011000", "path" : "/usr/lib/x86_64-linux-gnu/libyaml-cpp.so.0.5", "elfType" : 3, "buildId" : "BF65D47C8CD968E616F7D179F84A80CA71DB8249" }, { "b" : "7F57D2E08000", "path" : "/usr/lib/x86_64-linux-gnu/libpcrecpp.so.0", "elfType" : 3, "buildId" : "089B8438CC1394E978E56C556C9CAE768BD2F18C" }, { "b" : "7F57D2B87000", "path" : "/usr/lib/x86_64-linux-gnu/libboost_program_options.so.1.65.1", "elfType" : 3, "buildId" : "9F69F11220BB1FAAB0B73A2B6F4B0E81D9B901CE" }, { "b" : "7F57D296D000", "path" : "/usr/lib/x86_64-linux-gnu/libboost_filesystem.so.1.65.1", "elfType" : 3, "buildId" : "32B8421A0643426D9FB008005F5A86688065008B" }, { "b" : "7F57D2768000", "path" : "/usr/lib/x86_64-linux-gnu/libboost_system.so.1.65.1", "elfType" : 3, "buildId" : "4BA851D242F2DB710CB1817DE860CF97AE2F9714" }, { "b" : "7F57D24F8000", "path" : "/usr/lib/x86_64-linux-gnu/libtcmalloc.so.4", "elfType" : 3, "buildId" : "572D5C17FBDA6B678DF653411F676819DE18CA6B" }, { "b" : "7F57D22DD000", "path" : "/lib/x86_64-linux-gnu/libresolv.so.2", "elfType" : 3, "buildId" : "390E9CC4C215314B6D8ADE6D6E28F8518418039C" }, { "b" : "7F57D2050000", "path" : "/usr/lib/x86_64-linux-gnu/libssl.so.1.1", "elfType" : 3, "buildId" : "38AE5B4499DA422AA6D86BAED1902662DED5F730" }, { "b" : "7F57D1B85000", "path" : "/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1", "elfType" : 3, "buildId" : "68CECD8742C0C91CDC82709C3E52A8C9F9451FC5" }, { "b" : "7F57D197D000", "path" : "/lib/x86_64-linux-gnu/librt.so.1", "elfType" : 3, "buildId" : "9826FBDF57ED7D6965131074CB3C08B1009C1CD8" }, { "b" : "7F57D1779000", "path" : "/lib/x86_64-linux-gnu/libdl.so.2", "elfType" : 3, "buildId" : "25AD56E902E23B490A9CCDB08A9744D89CB95BCC" }, { "b" : "7F57D13F0000", "path" : "/usr/lib/x86_64-linux-gnu/libstdc++.so.6", "elfType" : 3, "buildId" : "F2119A44A99758114620C8E9D8E243D7094F77F6" }, { "b" : "7F57D1052000", "path" : "/lib/x86_64-linux-gnu/libm.so.6", "elfType" : 3, "buildId" : "A33761AB8FB485311B3C85BF4253099D7CABE653" }, { "b" : "7F57D0E3A000", "path" : "/lib/x86_64-linux-gnu/libgcc_s.so.1", "elfType" : 3, "buildId" : "679F3AE11120EC7C483BC9295345D836F5C104F7" }, { "b" : "7F57D0C1B000", "path" : "/lib/x86_64-linux-gnu/libpthread.so.0", "elfType" : 3, "buildId" : "28C6AADE70B2D40D1F0F3D0A1A0CAD1AB816448F" }, { "b" : "7F57D082A000", "path" : "/lib/x86_64-linux-gnu/libc.so.6", "elfType" : 3, "buildId" : "B417C0BA7CC5CF06D1D1BED6652CEDB9253C60D0" }, { "b" : "7F57D05B8000", "path" : "/lib/x86_64-linux-gnu/libpcre.so.3", "elfType" : 3, "buildId" : "5B3416BB188EAF3FA4B7530AAE6C1890B38B0372" }, { "b" : "7F57D039D000", "path" : "/usr/lib/x86_64-linux-gnu/libunwind.so.8", "elfType" : 3, "buildId" : "7995F03B59E1D6EB7968EEA5B8534910D4E8E8D6" }, { "b" : "7F57D3901000", "path" : "/lib64/ld-linux-x86-64.so.2", "elfType" : 3, "buildId" : "64DF1B961228382FE18684249ED800AB1DCEAAD4" }, { "b" : "7F57D0177000", "path" : "/lib/x86_64-linux-gnu/liblzma.so.5", "elfType" : 3, "buildId" : "8FBCCA354D964860B9E6EB3736E9B7BC6177B417" } ] }}
mongod(_ZN5mongo15printStackTraceERSo+0x3A) [0x55f760d5e4ca]
mongod(+0x203A78E) [0x55f760d5d78e]
mongod(+0x203ADDC) [0x55f760d5dddc]
mongod(+0x11B05E6) [0x55f75fed35e6]
libpthread.so.0(+0x12890) [0x7f57d0c2d890]
mongod(_ZN2js14TenuringTracer8traverseI8JSObjectEEvPPT_+0x0) [0x55f7603a89b0]
mongod(_ZN2js8frontend9ObjectBox5traceEP8JSTracer+0x36) [0x55f760393fd6]
mongod(_ZN2JS12AutoGCRooter8traceAllEP8JSTracer+0xDB) [0x55f7603ae07b]
mongod(_ZN2js2gc9GCRuntime11markRuntimeEP8JSTracerNS1_18TraceOrMarkRuntimeE+0xAD) [0x55f7603ae74d]
mongod(_ZN2js7Nursery7collectEP9JSRuntimeN2JS8gcreason6ReasonEPN7mozilla6VectorIPNS_11ObjectGroupELm0ENS_17SystemAllocPolicyEEE+0x290) [0x55f7603af390]
mongod(_ZN2js2gc9GCRuntime7minorGCEP9JSContextN2JS8gcreason6ReasonE+0x86) [0x55f76018eac6]
mongod(_ZN2js8AllocateI8JSObjectLNS_7AllowGCE1EEEPS1_PNS_16ExclusiveContextENS_2gc9AllocKindEmNS6_11InitialHeapEPKNS_5ClassE+0x15A) [0x55f76039e47a]
mongod(+0x14AA585) [0x55f7601cd585]
mongod(_ZN2js29NewObjectWithClassProtoCommonEPNS_16ExclusiveContextEPKNS_5ClassEN2JS6HandleIP8JSObjectEENS_2gc9AllocKindENS_13NewObjectKindE+0x18D) [0x55f7601ce2dd]
mongod(+0x13BCD24) [0x55f7600dfd24]
mongod(+0x13BECEF) [0x55f7600e1cef]
mongod(+0x13CE86E) [0x55f7600f186e]
mongod(+0x13C7E5E) [0x55f7600eae5e]
mongod(+0x13CB5FD) [0x55f7600ee5fd]
mongod(+0x13DBD39) [0x55f7600fed39]
??? [0x3698771d926d]
----- END BACKTRACE -----
Status changed to 'Confirmed' because the bug affects multiple users.