Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
10.1.18, 10.1(EOL), 10.2(EOL)
-
None
-
Debian GNU/Linux 8.2 (jessie)
32GB Ram - CPU 16 Core - SSD 1TB
-
10.2.10
Description
170505 16:17:38 [ERROR] mysqld got signal 11 ;
|
This could be because you hit a bug. It is also possible that this binary
|
or one of the libraries it was linked against is corrupt, improperly built,
|
or misconfigured. This error can also be caused by malfunctioning hardware.
|
|
|
To report this bug, see https://mariadb.com/kb/en/reporting-bugs
|
|
|
We will try our best to scrape up some info that will hopefully help
|
diagnose the problem, but since we have already crashed,
|
something is definitely wrong and this may fail.
|
|
|
Server version: 10.1.18-MariaDB-1~jessie
|
key_buffer_size=8589934592
|
read_buffer_size=2097152
|
max_used_connections=1419
|
max_threads=5002
|
thread_count=1023
|
It is possible that mysqld could use up to
|
key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 28979515 K bytes of memory
|
Hope that's ok; if not, decrease some variables in the equation.
|
|
|
Thread pointer: 0x0x7f636b4ec008
|
Attempting backtrace. You can use the following information to find out
|
where mysqld died. If you see no messages after this, something went
|
terribly wrong...
|
stack_bottom = 0x7f6299eef1f8 thread_stack 0x48400
|
*** buffer overflow detected ***: /usr/sbin/mysqld terminated
|
Attachments
Activity
Judging by the error log, you have high concurrency on the server, but still – do you have any guess at all which query was executed at the time of the crash? Apparently it involves a function and geometry.
Does it keep happening, or was it a one-time event?
yes we use geometry functions but they are so many running we can't tell which was the one that make maria crash.
today crash occured for the second time
message was: (see attached log)
mariadb.err
how can I get the query that caused the serve to crash ?
Any suggestion will be appreciated.
Thank you in advance
Normally the server is supposed to print the problematic query in the error log, but with buffer overflow crash reports are not reliable. Still, please check, maybe the other occurrence was "luckier" this way.
In a different situation I would have suggested enabling the general log for a while (until the next crash). However, in your case, when there are over a thousand of open connections at a time, and we don't even get the crashing thread ID in the error log, the general log will be useless. My hope was that your server only runs a few types of queries most of the time (which happens often enough in busy environments), and you'd be able to recognize it by general attributes – function, geometry, collection, polygon, etc. I understand that it's impossible if you have many different queries.
No, We did not have any luck. We suspect it might be the GeomFromText function on hi concurrent insert, in table with geometry field passing as argument POINT(lat ,lng). But not sure.
Are you using ST_RELATE() function? I've got some buffer overrun with it, wondering if it could be related.
SELECT ST_RELATE( |
ST_DIFFERENCE(
|
GEOMETRYFROMTEXT(' |
MULTILINESTRING(
|
( 12841 36140, 8005 31007, 26555 31075, 52765 41191, 28978 6548, 45720 32057, 53345 3221 ),
|
( 8304 59107, 25233 31592, 40502 25303, 8205 42940 ),
|
( 7829 7305, 58841 56759, 64115 8512, 37562 54145, 2210 14701 ),
|
( 20379 2805, 40807 27770, 28147 14883, 26439 29383, 55663 5086 ),
|
( 35944 64702, 14433 23728, 49317 26241, 790 16941 )
|
)
|
'), |
GEOMETRYFROMTEXT('POINT(46061 13545)') |
),
|
GEOMETRYFROMTEXT('POINT(4599 60359)'), |
'F*FFFF**F' |
);
|
Since we don't know enough about the initial problem, let's at least fix the test case above in scope of this bug report, maybe by luck it will also fix the reported failure.
SELECT ST_RELATE( |
ST_DIFFERENCE(
|
GEOMETRYFROMTEXT(' |
MULTILINESTRING(
|
( 12841 36140, 8005 31007, 26555 31075, 52765 41191, 28978 6548, 45720 32057, 53345 3221 ),
|
( 8304 59107, 25233 31592, 40502 25303, 8205 42940 ),
|
( 7829 7305, 58841 56759, 64115 8512, 37562 54145, 2210 14701 ),
|
( 20379 2805, 40807 27770, 28147 14883, 26439 29383, 55663 5086 ),
|
( 35944 64702, 14433 23728, 49317 26241, 790 16941 )
|
)
|
'), |
GEOMETRYFROMTEXT('POINT(46061 13545)') |
),
|
GEOMETRYFROMTEXT('POINT(4599 60359)'), |
'F*FFFF**F' |
);
|
|
10.1 debug 01209de7637a7206c18788e08919b5ccf0b3d700 |
mysqltest: At line 1: query 'SELECT ST_RELATE(
|
ST_DIFFERENCE(
|
GEOMETRYFROMTEXT('
|
MULTILINESTRING(
|
( 12841 36140, 8005 31007, 26555 31075, 52765 41191, 28978 6548, 45720 32057, 53345 3221 ),
|
( 8304 59107, 25233 31592, 40502 25303, 8205 42940 ),
|
( 7829 7305, 58841 56759, 64115 8512, 37562 54145, 2210 14701 ),
|
( 20379 2805, 40807 27770, 28147 14883, 26439 29383, 55663 5086 ),
|
( 35944 64702, 14433 23728, 49317 26241, 790 16941 )
|
)
|
'),
|
GEOMETRYFROMTEXT('POINT(46061 13545)')
|
),
|
GEOMETRYFROMTEXT('POINT(4599 60359)'),
|
'F*FFFF**F'
|
)' failed: 5: Out of memory (Needed 1024 bytes)
|
|
10.1 debug 01209de7637a7206c18788e08919b5ccf0b3d700 |
Error: Reallocating overrun buffer 0x55e501f16bbe, 0x55e501f04329, 0x55e50171e181, mysys/safemalloc.c:176, 0x55e50171f757, 0x55e501a4fdf2, 0x55e501a4fd68, 0x55e50192dfe8
|
Allocated at 0x55e50171e1c5, 0x55e5015aedd0, 0x55e50171f757, 0x55e501a4fdf2, 0x55e50192e130, 0x55e5018cf033, sql/sql_string.h:331, sql/sql_string.cc:699
|
Error: Reallocating overrun buffer mysys/safemalloc.c:176, mysys/my_malloc.c:165, sql/sql_string.cc:94, sql/sql_string.h:331, sql/sql_string.h:485, sql/gcalc_tools.cc:119, sql/item_geofunc.cc:1262, sql/item.cc:6569
|
Allocated at sql/sql_string.cc:100, sql/sql_string.h:331, sql/sql_string.cc:699, sql/gcalc_tools.cc:114, sql/item_geofunc.cc:1244, sql/item.cc:6569, sql/protocol.cc:914, sql/sql_class.cc:2837
|
Error: Freeing overrun buffer mysys/safemalloc.c:191, mysys/my_malloc.c:219, 0x55e5015aed7f, 0x55e5015aecee, 0x55e501934a92, 0x55e501935f88, sql/sql_string.h:317, sql/item_geofunc.h:329
|
Allocated at sql/sql_string.cc:100, sql/sql_string.h:331, sql/sql_string.cc:699, sql/gcalc_tools.cc:114, sql/item_geofunc.cc:1244, sql/item.cc:6569, sql/protocol.cc:914, sql/sql_class.cc:2837
|
|
10.1 valgrind 01209de7637a7206c18788e08919b5ccf0b3d700 |
==32512== Invalid write of size 4
|
==32512== at 0x8ADC5F: String::q_append(unsigned int) (sql_string.h:500)
|
==32512== by 0x9CFBB5: Gcalc_function::add_operation(unsigned int, unsigned int) (gcalc_tools.cc:50)
|
==32512== by 0x8A8216: setup_relate_func(Geometry*, Geometry*, Gcalc_operation_transporter*, Gcalc_function*, char const*) (item_geofunc.cc:1197)
|
==32512== by 0x8A85A8: Item_func_spatial_relate::val_int() (item_geofunc.cc:1256)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== by 0x5E9C92: mysql_parse(THD*, char*, unsigned int, Parser_state*) (sql_parse.cc:7333)
|
==32512== by 0x5D8895: dispatch_command(enum_server_command, THD*, char*, unsigned int) (sql_parse.cc:1484)
|
==32512== by 0x5D7632: do_command(THD*) (sql_parse.cc:1106)
|
==32512== Address 0xddee1d8 is 0 bytes after a block of size 520 alloc'd
|
==32512== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
|
==32512== by 0xED4FAB: my_malloc (my_malloc.c:101)
|
==32512== by 0x68C2C8: String::realloc_raw(unsigned int) (sql_string.cc:100)
|
==32512== by 0x518047: String::realloc(unsigned int) (sql_string.h:331)
|
==32512== by 0x68D85A: String::reserve(unsigned int, unsigned int) (sql_string.cc:699)
|
==32512== by 0x9CFD7B: Gcalc_function::reserve_op_buffer(unsigned int) (gcalc_tools.cc:113)
|
==32512== by 0x8A83BD: Item_func_spatial_relate::val_int() (item_geofunc.cc:1245)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== Conditional jump or move depends on uninitialised value(s)
|
==32512== at 0x9CFE64: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:132)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x8AE284: Gcalc_function::count() (gcalc_tools.h:124)
|
==32512== by 0x9D0571: Gcalc_function::check_function(Gcalc_scan_iterator&) (gcalc_tools.cc:344)
|
==32512== by 0x8A866F: Item_func_spatial_relate::val_int() (item_geofunc.cc:1263)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== by 0x5E9C92: mysql_parse(THD*, char*, unsigned int, Parser_state*) (sql_parse.cc:7333)
|
==32512== Conditional jump or move depends on uninitialised value(s)
|
==32512== at 0x9CFEB5: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:142)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x8AE284: Gcalc_function::count() (gcalc_tools.h:124)
|
==32512== by 0x9D0571: Gcalc_function::check_function(Gcalc_scan_iterator&) (gcalc_tools.cc:344)
|
==32512== by 0x8A866F: Item_func_spatial_relate::val_int() (item_geofunc.cc:1263)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== by 0x5E9C92: mysql_parse(THD*, char*, unsigned int, Parser_state*) (sql_parse.cc:7333)
|
==32512== Use of uninitialised value of size 8
|
==32512== at 0x9CFED3: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:145)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x8AE284: Gcalc_function::count() (gcalc_tools.h:124)
|
==32512== by 0x9D0571: Gcalc_function::check_function(Gcalc_scan_iterator&) (gcalc_tools.cc:344)
|
==32512== by 0x8A866F: Item_func_spatial_relate::val_int() (item_geofunc.cc:1263)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== by 0x5E9C92: mysql_parse(THD*, char*, unsigned int, Parser_state*) (sql_parse.cc:7333)
|
==32512== Use of uninitialised value of size 8
|
==32512== at 0x9CFEE7: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:145)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x8AE284: Gcalc_function::count() (gcalc_tools.h:124)
|
==32512== by 0x9D0571: Gcalc_function::check_function(Gcalc_scan_iterator&) (gcalc_tools.cc:344)
|
==32512== by 0x8A866F: Item_func_spatial_relate::val_int() (item_geofunc.cc:1263)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== by 0x5E9C92: mysql_parse(THD*, char*, unsigned int, Parser_state*) (sql_parse.cc:7333)
|
==32512== Conditional jump or move depends on uninitialised value(s)
|
==32512== at 0x9D0179: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:224)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x9D0046: Gcalc_function::count_internal(char const*, unsigned int, char const**) (gcalc_tools.cc:183)
|
==32512== by 0x8AE284: Gcalc_function::count() (gcalc_tools.h:124)
|
==32512== by 0x9D0571: Gcalc_function::check_function(Gcalc_scan_iterator&) (gcalc_tools.cc:344)
|
==32512== by 0x8A866F: Item_func_spatial_relate::val_int() (item_geofunc.cc:1263)
|
==32512== by 0x848710: Item::send(Protocol*, String*) (item.cc:6569)
|
==32512== by 0x522485: Protocol::send_result_set_row(List<Item>*) (protocol.cc:914)
|
==32512== by 0x59B9E5: select_send::send_data(List<Item>&) (sql_class.cc:2837)
|
==32512== by 0x61E910: JOIN::exec_inner() (sql_select.cc:2591)
|
==32512== by 0x61E382: JOIN::exec() (sql_select.cc:2512)
|
==32512== by 0x621A06: mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) (sql_select.cc:3449)
|
==32512== by 0x617229: handle_select(THD*, LEX*, select_result*, unsigned long) (sql_select.cc:384)
|
==32512== by 0x5E6584: execute_sqlcom_select(THD*, TABLE_LIST*) (sql_parse.cc:5912)
|
==32512== by 0x5DC79E: mysql_execute_command(THD*) (sql_parse.cc:2982)
|
==32512== by 0x5E9C92: mysql_parse(THD*, char*, unsigned int, Parser_state*) (sql_parse.cc:7333)
|
Issue with the ST_RELATE found by Elena is fixed now
http://lists.askmonty.org/pipermail/commits/2017-October/011536.html
Though the initial problem is not related to this. I'd really like to be able to reproduce it somehow.
Is it possible to see the general log or install the audit plugin?
Sorry for the delay.
We patched with workaround validating the point before pass to geometry function.
Thanks
dgit, i'm interested to take a look at the patch.
Can you please send it?
Or just explain a bit how it validates the point?
From the attached log:
*** buffer overflow detected ***: /usr/sbin/mysqld terminated======= Backtrace: =========/lib/x86_64-linux-gnu/libc.so.6(+0x731ff)[0x7f65cbbef1ff]/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f65cbc724c7]/lib/x86_64-linux-gnu/libc.so.6(+0xf46e0)[0x7f65cbc706e0]/lib/x86_64-linux-gnu/libc.so.6(+0xf6437)[0x7f65cbc72437]/usr/sbin/mysqld(my_addr_resolve+0x48)[0x7f65ce96acd8]/usr/sbin/mysqld(my_print_stacktrace+0x1d2)[0x7f65ce957462]/usr/sbin/mysqld(handle_fatal_signal+0x2d5)[0x7f65ce493785]/lib/x86_64-linux-gnu/libpthread.so.0(+0xf8d0)[0x7f65cdabd8d0]/usr/sbin/mysqld(_ZN10Gcalc_heap14new_point_infoEddj+0x1b)[0x7f65ce5d347b]/usr/sbin/mysqld(_ZN23Gcalc_shape_transporter13int_add_pointEjdd+0x1f)[0x7f65ce5d372f]/usr/sbin/mysqld(_ZNK11Gis_polygon12store_shapesEP23Gcalc_shape_transporter+0x240)[0x7f65ce59d0e0]/usr/sbin/mysqld(_ZNK23Gis_geometry_collection12store_shapesEP23Gcalc_shape_transporter+0xaa)[0x7f65ce59f14a]/usr/sbin/mysqld(_ZN29Item_func_spatial_precise_rel7val_intEv+0x5ec)[0x7f65ce4ffc8c]/usr/sbin/mysqld(_ZN4Item13save_in_fieldEP5Fieldb+0x15c)[0x7f65ce4a2c7c]/usr/sbin/mysqld(_Z12sp_eval_exprP3THDP5FieldPP4Item+0x72)[0x7f65ce593292]/usr/sbin/mysqld(_ZN16sp_instr_freturn9exec_coreEP3THDPj+0x49)[0x7f65ce591009]/usr/sbin/mysqld(_ZN13sp_lex_keeper23reset_lex_and_exec_coreEP3THDPjbP8sp_instr+0x2fa)[0x7f65ce59840a]/usr/sbin/mysqld(_ZN7sp_head7executeEP3THDb+0x76e)[0x7f65ce5945ee]/usr/sbin/mysqld(_ZN7sp_head16execute_functionEP3THDPP4ItemjP5Field+0x54c)[0x7f65ce5951cc]/usr/sbin/mysqld(_ZN12Item_func_sp12execute_implEP3THD+0x109)[0x7f65ce4f7959]/usr/sbin/mysqld(_ZN12Item_func_sp7executeEv+0x2c)[0x7f65ce4f7a3c]/usr/sbin/mysqld(_ZN12Item_func_sp7val_intEv+0x11)[0x7f65ce4fbba1]/usr/sbin/mysqld(_ZN22Item_func_set_user_var5checkEb+0xbb)[0x7f65ce4f590b]/usr/sbin/mysqld(_ZN12set_var_user5checkEP3THD+0x2c)[0x7f65ce28824c]/usr/sbin/mysqld(_Z17sql_set_variablesP3THDP4ListI12set_var_baseEb+0x39)[0x7f65ce28a149]/usr/sbin/mysqld(_Z21mysql_execute_commandP3THD+0x65d4)[0x7f65ce30db14]/usr/sbin/mysqld(_Z11mysql_parseP3THDPcjP12Parser_state+0x285)[0x7f65ce3108b5]/usr/sbin/mysqld(_Z16dispatch_command19enum_server_commandP3THDPcj+0x1c89)[0x7f65ce3133e9]/usr/sbin/mysqld(_Z10do_commandP3THD+0x16e)[0x7f65ce313b2e]/usr/sbin/mysqld(_Z24do_handle_one_connectionP3THD+0x182)[0x7f65ce3de022]/usr/sbin/mysqld(handle_one_connection+0x40)[0x7f65ce3de1e0]/lib/x86_64-linux-gnu/libpthread.so.0(+0x80a4)[0x7f65cdab60a4]/lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f65cbc6204d]======= Memory map: ========7f612f3fd000-7f612f3fe000 ---p 00000000 00:00 0...