Describe the bug

redis coredump

GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-120.el7 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: http://www.gnu.org/software/gdb/bugs/... Reading symbols from redis/bin/redis-server...(no debugging symbols found)...done. [New LWP 19936]

warning: Corrupted shared library list: 0x7f9755eb66e0 != 0x7f9755eb3a30 Core was generated by `redis-rdb-bgsave 127.0.0.1:58090 . '. Program terminated with signal 11, Segmentation fault.

0 0x00007f9755cac9da in ?? ()

(gdb) bt Python Exception Cannot access memory at address 0xea98d5aebadbc277: (gdb) bt

0 0x00007f9755cac9da in ?? ()

Cannot access memory at address 0xea98d5aebadbc277 (gdb) r

To reproduce

Enable both RDB and AOF, Default save policy.

Image

Image

Additional information

=== REDIS BUG REPORT START: Cut & paste starting from here === 8596:C 17 Jul 2025 14:57:03.041 # Redis 7.2.7 crashed by signal: 6, si_code: -6 8596:C 17 Jul 2025 14:57:03.041 # Crashed running the instruction at: 0x7f9754da0387

------ STACK TRACE ------ EIP: /lib64/libc.so.6(gsignal+0x37)[0x7f9754da0387]

Backtrace: /lib64/libpthread.so.0(+0xf630)[0x7f9755147630] /lib64/libc.so.6(gsignal+0x37)[0x7f9754da0387] /lib64/libc.so.6(abort+0x148)[0x7f9754da1a78] redis-rdb-bgsave 127.0.0.1:58090[0x450437] redis-rdb-bgsave 127.0.0.1:58090(lzf_compress+0x10a)[0x53ffca] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveLzfStringObject+0x6c)[0x50de0c] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveRawString+0x115)[0x50df75] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveObject+0x568)[0x50ebe8] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveKeyValuePair+0x90)[0x50f2e0] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveDb+0x1ec)[0x50f5fc] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveRio+0x208)[0x50f8f8] redis-rdb-bgsave 127.0.0.1:58090[0x50f9fc] redis-rdb-bgsave 127.0.0.1:58090(rdbSave+0x6f)[0x50fcef] redis-rdb-bgsave 127.0.0.1:58090(rdbSaveBackground+0x129)[0x50ffa9] redis-rdb-bgsave 127.0.0.1:58090(serverCron+0x62e)[0x55818e] redis-rdb-bgsave 127.0.0.1:58090(aeProcessEvents+0x30b)[0x55db9b] redis-rdb-bgsave 127.0.0.1:58090(aeMain+0x2d)[0x55dded] redis-rdb-bgsave 127.0.0.1:58090(main+0x383)[0x4507d3] /lib64/libc.so.6(__libc_start_main+0xf5)[0x7f9754d8c555] redis-rdb-bgsave 127.0.0.1:58090[0x450f3a]

------ REGISTERS ------ 8596:C 17 Jul 2025 14:57:03.042 # RAX:0000000000000000 RBX:0000000000000055 RCX:ffffffffffffffff RDX:0000000000000006 RDI:0000000000002194 RSI:0000000000002194 RBP:00000000344a4255 RSP:00007ffcd13f49f8 R8 :00000000cced2d0d R9 :0000000000000000 R10:0000000000000008 R11:0000000000000202 R12:80000000000000e6 R13:00007f9752a120f8 R14:00007f9752a62295 R15:0000000000000006 RIP:00007f9754da0387 EFL:0000000000000202 CSGSFS:0000000000000033 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a07) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a06) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a05) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a04) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a03) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a02) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a01) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f4a00) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49ff) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49fe) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49fd) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49fc) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49fb) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49fa) -> 0000000000000000 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49f9) -> 0000000000000020 8596:C 17 Jul 2025 14:57:03.042 # (00007ffcd13f49f8) -> 00007f9754da1a78

------ INFO OUTPUT ------

Server

redis_version:7.2.7 redis_git_sha1:fe35132c redis_git_dirty:0 redis_build_id:11a2d927ff90cd00 redis_mode:standalone os:Linux 3.10.0-1160.119.1.el7.x86_64 x86_64 arch_bits:64 monotonic_clock:POSIX clock_gettime multiplexing_api:epoll atomicvar_api:c11-builtin gcc_version:8.3.1 process_id:8596 process_supervised:systemd run_id:3ecfce24d484d509a7beee8541e783936fe12ec9 tcp_port:58090 server_time_usec:1752735423040301 uptime_in_seconds:79057 uptime_in_days:0 hz:10 configured_hz:10 lru_clock:7904959 executable:/usr/info2soft/cntlcenter/thirdapp/redis/bin/redis-server config_file:/usr/info2soft/cntlcenter/etc/redis.conf io_threads_active:0 listener0:name=tcp,bind=127.0.0.1,bind=-::1,port=58090

Clients

connected_clients:9 cluster_connections:0 maxclients:10000 client_recent_max_input_buffer:8 client_recent_max_output_buffer:0 blocked_clients:0 tracking_clients:0 clients_in_timeout_table:0 total_blocking_keys:0 total_blocking_keys_on_nokey:0

Memory

used_memory:1125488 used_memory_human:1.07M used_memory_rss:4608000 used_memory_rss_human:4.39M used_memory_peak:1183064 used_memory_peak_human:1.13M used_memory_peak_perc:95.13% used_memory_overhead:884392 used_memory_startup:866736 used_memory_dataset:241096 used_memory_dataset_perc:93.18% allocator_allocated:1291296 allocator_active:1540096 allocator_resident:5316608 total_system_memory:16287666176 total_system_memory_human:15.17G used_memory_lua:31744 used_memory_vm_eval:31744 used_memory_lua_human:31.00K used_memory_scripts_eval:0 number_of_cached_scripts:0 number_of_functions:0 number_of_libraries:0 used_memory_vm_functions:32768 used_memory_vm_total:64512 used_memory_vm_total_human:63.00K used_memory_functions:184 used_memory_scripts:184 used_memory_scripts_human:184B maxmemory:0 maxmemory_human:0B maxmemory_policy:noeviction allocator_frag_ratio:1.19 allocator_frag_bytes:248800 allocator_rss_ratio:3.45 allocator_rss_bytes:3776512 rss_overhead_ratio:0.87 rss_overhead_bytes:-708608 mem_fragmentation_ratio:4.15 mem_fragmentation_bytes:3496712 mem_not_counted_for_evict:8 mem_replication_backlog:0 mem_total_replication_buffers:0 mem_clients_slaves:0 mem_clients_normal:17352 mem_cluster_links:0 mem_aof_buffer:8 mem_allocator:jemalloc-5.3.0 active_defrag_running:0 lazyfree_pending_objects:0 lazyfreed_objects:0

Persistence

loading:0 async_loading:0 current_cow_peak:0 current_cow_size:0 current_cow_size_age:0 current_fork_perc:0.00 current_save_keys_processed:0 current_save_keys_total:0 rdb_changes_since_last_save:368 rdb_bgsave_in_progress:0 rdb_last_save_time:1752656667 rdb_last_bgsave_status:err rdb_last_bgsave_time_sec:0 rdb_current_bgsave_time_sec:-1 rdb_saves:13080 rdb_last_cow_size:245760 rdb_last_load_keys_expired:0 rdb_last_load_keys_loaded:0 aof_enabled:1 aof_rewrite_in_progress:0 aof_rewrite_scheduled:0 aof_last_rewrite_time_sec:-1 aof_current_rewrite_time_sec:-1 aof_last_bgrewrite_status:ok aof_rewrites:0 aof_rewrites_consecutive_failures:0 aof_last_write_status:ok aof_last_cow_size:0 module_fork_in_progress:0 module_fork_last_cow_size:0 aof_current_size:1316628 aof_base_size:88 aof_pending_rewrite:0 aof_buffer_length:0 aof_pending_bio_fsync:0 aof_delayed_fsync:0

Stats

total_connections_received:25 total_commands_processed:1289 instantaneous_ops_per_sec:0 total_net_input_bytes:441661 total_net_output_bytes:368468 total_net_repl_input_bytes:0 total_net_repl_output_bytes:0 instantaneous_input_kbps:0.00 instantaneous_output_kbps:0.00 instantaneous_input_repl_kbps:0.00 instantaneous_output_repl_kbps:0.00 rejected_connections:0 sync_full:0 sync_partial_ok:0 sync_partial_err:0 expired_keys:0 expired_stale_perc:0.00 expired_time_cap_reached_count:0 expire_cycle_cpu_milliseconds:886 evicted_keys:0 evicted_clients:0 total_eviction_exceeded_time:0 current_eviction_exceeded_time:0 keyspace_hits:258 keyspace_misses:291 pubsub_channels:0 pubsub_patterns:0 pubsubshard_channels:0 latest_fork_usec:278 total_forks:13079 migrate_cached_sockets:0 slave_expires_tracked_keys:0 active_defrag_hits:0 active_defrag_misses:0 active_defrag_key_hits:0 active_defrag_key_misses:0 total_active_defrag_time:0 current_active_defrag_time:0 tracking_total_keys:0 tracking_total_items:0 tracking_total_prefixes:0 unexpected_error_replies:0 total_error_replies:24 dump_payload_sanitizations:0 total_reads_processed:1329 total_writes_processed:1313 io_threaded_reads_processed:0 io_threaded_writes_processed:0 reply_buffer_shrinks:94 reply_buffer_expands:70 eventloop_cycles:789767 eventloop_duration_sum:103638173 eventloop_duration_cmd_sum:6110 instantaneous_eventloop_cycles_per_sec:9 instantaneous_eventloop_duration_usec:61 acl_access_denied_auth:0 acl_access_denied_cmd:0 acl_access_denied_key:0 acl_access_denied_channel:0

Replication

role:master connected_slaves:0 master_failover_state:no-failover master_replid:00a3c7e5fdd8e97464a8f8bb1b8d4e0a38070457 master_replid2:0000000000000000000000000000000000000000 master_repl_offset:524 second_repl_offset:-1 repl_backlog_active:0 repl_backlog_size:1048576 repl_backlog_first_byte_offset:0 repl_backlog_histlen:0

CPU

used_cpu_sys:0.002142 used_cpu_user:0.000000 used_cpu_sys_children:0.000000 used_cpu_user_children:0.000000 used_cpu_sys_main_thread:0.002142 used_cpu_user_main_thread:0.000000

Modules

Commandstats

cmdstat_rpush:calls=290,usec=2128,usec_per_call=7.34,rejected_calls=0,failed_calls=0 cmdstat_auth:calls=26,usec=201,usec_per_call=7.73,rejected_calls=0,failed_calls=0 cmdstat_ping:calls=137,usec=287,usec_per_call=2.09,rejected_calls=23,failed_calls=0 cmdstat_lrange:calls=143,usec=779,usec_per_call=5.45,rejected_calls=0,failed_calls=0 cmdstat_llen:calls=406,usec=1104,usec_per_call=2.72,rejected_calls=0,failed_calls=0 cmdstat_ltrim:calls=143,usec=450,usec_per_call=3.15,rejected_calls=0,failed_calls=0 cmdstat_echo:calls=1,usec=5,usec_per_call=5.00,rejected_calls=0,failed_calls=0 cmdstat_lpop:calls=143,usec=1156,usec_per_call=8.08,rejected_calls=1,failed_calls=0

Errorstats

errorstat_MISCONF:count=24

Latencystats

latency_percentiles_usec_rpush:p50=7.007,p99=25.087,p99.9=31.103 latency_percentiles_usec_auth:p50=7.007,p99=12.031,p99.9=12.031 latency_percentiles_usec_ping:p50=2.007,p99=3.007,p99.9=3.007 latency_percentiles_usec_lrange:p50=5.023,p99=25.087,p99.9=35.071 latency_percentiles_usec_llen:p50=2.007,p99=7.007,p99.9=14.015 latency_percentiles_usec_ltrim:p50=4.015,p99=13.055,p99.9=16.063 latency_percentiles_usec_echo:p50=5.023,p99=5.023,p99.9=5.023 latency_percentiles_usec_lpop:p50=8.031,p99=23.039,p99.9=24.063

Cluster

cluster_enabled:0

Keyspace

db0:keys=2,expires=0,avg_ttl=0

------ CLIENT LIST OUTPUT ------ id=12 addr=127.0.0.1:51442 laddr=127.0.0.1:58090 fd=15 name= age=75673 idle=75673 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=15 addr=127.0.0.1:60326 laddr=127.0.0.1:58090 fd=18 name= age=75332 idle=75332 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=10 addr=127.0.0.1:41798 laddr=127.0.0.1:58090 fd=13 name= age=78450 idle=78450 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=13 addr=127.0.0.1:55116 laddr=127.0.0.1:58090 fd=16 name= age=75539 idle=75539 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=29 addr=127.0.0.1:54596 laddr=127.0.0.1:58090 fd=11 name= age=1711 idle=1711 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=11 addr=127.0.0.1:51430 laddr=127.0.0.1:58090 fd=14 name= age=75674 idle=75324 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=27 addr=127.0.0.1:39098 laddr=127.0.0.1:58090 fd=9 name= age=3672 idle=3672 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=28 addr=127.0.0.1:39100 laddr=127.0.0.1:58090 fd=10 name= age=3672 idle=3672 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver= id=14 addr=127.0.0.1:55180 laddr=127.0.0.1:58090 fd=17 name= age=75538 idle=75538 flags=N db=0 sub=0 psub=0 ssub=0 multi=-1 qbuf=0 qbuf-free=0 argv-mem=0 multi-mem=0 rbs=1024 rbp=0 obl=0 oll=0 omem=0 tot-mem=1928 events=r cmd=ping user=i2soft redir=-1 resp=2 lib-name= lib-ver=

------ MODULES INFO OUTPUT ------

------ CONFIG DEBUG OUTPUT ------ activedefrag no io-threads 1 lazyfree-lazy-user-del no io-threads-do-reads no lazyfree-lazy-server-del no lazyfree-lazy-user-flush no repl-diskless-load disabled lazyfree-lazy-expire no replica-read-only yes client-query-buffer-limit 1gb list-compress-depth 0 proto-max-bulk-len 512mb lazyfree-lazy-eviction no sanitize-dump-payload no slave-read-only yes repl-diskless-sync no

------ FAST MEMORY TEST ------ *** Preparing to test memory region 8ee000 (2273280 bytes) *** Preparing to test memory region 1707000 (135168 bytes) *** Preparing to test memory region 7f9744000000 (135168 bytes) *** Preparing to test memory region 7f9748800000 (8388608 bytes) *** Preparing to test memory region 7f9749000000 (2097152 bytes) *** Preparing to test memory region 7f974937f000 (2621440 bytes) *** Preparing to test memory region 7f9749600000 (8388608 bytes) *** Preparing to test memory region 7f9749e00000 (2097152 bytes) *** Preparing to test memory region 7f974a0ba000 (8388608 bytes) *** Preparing to test memory region 7f974a8bb000 (8388608 bytes) *** Preparing to test memory region 7f974b0bc000 (8388608 bytes) *** Preparing to test memory region 7f974b8bd000 (8388608 bytes) *** Preparing to test memory region 7f9752600000 (8388608 bytes) *** Preparing to test memory region 7f9754081000 (8192 bytes) *** Preparing to test memory region 7f9754508000 (4096 bytes) *** Preparing to test memory region 7f9754b63000 (8192 bytes) *** Preparing to test memory region 7f9755133000 (20480 bytes) *** Preparing to test memory region 7f9755350000 (16384 bytes) *** Preparing to test memory region 7f9755ea6000 (8192 bytes) *** Preparing to test memory region 7f9755ea8000 (49152 bytes) *** Preparing to test memory region 7f9755eb6000 (4096 bytes) .O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.22578:M 17 Jul 2025 14:57:03.342 # Background saving terminated by signal 11

Comment From: sundb

@info2soft what is the OS, special config or other clues? Can you reproduce it? thx.