SIGSEGV in maria_scan_init on EXECUTE when using big_tables=on

SET optimizer_switch='derived_merge=off';

CREATE TABLE t (a INT) ENGINE=InnoDB;

PREPARE s FROM 'SELECT * FROM (SELECT * FROM t) AS d';

EXECUTE s;

SET optimizer_switch='default';

SET big_tables='on';

EXECUTE s;

Core was generated by `/test/MD010121-mariadb-10.6.0-linux-x86_64-dbg/bin/mysqld --no-defaults --core-'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)

    at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

[Current thread is 1 (Thread 0x1509cc162700 (LWP 1157432))]

(gdb) bt

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

#1  0x000055948c1150d7 in my_write_core (sig=sig@entry=11) at /test/10.6_dbg/mysys/stacktrace.c:424

#2  0x000055948b8a9ab1 in handle_fatal_signal (sig=11) at /test/10.6_dbg/sql/signal_handler.cc:330

#3  <signal handler called>

#4  maria_scan_init (info=0x0) at /test/10.6_dbg/storage/maria/ma_scan.c:24

#5  0x000055948bb3313d in ha_maria::rnd_init (this=<optimized out>, scan=<optimized out>) at /test/10.6_dbg/storage/maria/ha_maria.cc:2495

#6  0x000055948b8b4194 in handler::ha_rnd_init (scan=true, this=0x1509880763c0) at /test/10.6_dbg/sql/handler.h:3376

#7  handler::read_first_row (this=0x1509880763c0, buf=0x150988075448 "\377", primary_key=64) at /test/10.6_dbg/sql/handler.cc:3311

#8  0x000055948b63e6e5 in handler::ha_read_first_row (primary_key=<optimized out>, buf=<optimized out>, this=0x1509880763c0) at /test/10.6_dbg/sql/sql_class.h:7062

#9  join_read_system (tab=tab@entry=0x150988013790) at /test/10.6_dbg/sql/sql_select.cc:21134

#10 0x000055948b646695 in join_read_const_table (thd=0x150988000db8, tab=tab@entry=0x150988013790, pos=pos@entry=0x150988013d48) at /test/10.6_dbg/sql/sql_select.cc:21030

#11 0x000055948b65c3dd in make_join_statistics (join=join@entry=0x150988012808, tables_list=@0x15098802a6b0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x150988013478, last = 0x150988013478, elements = 1}, <No data fields>}, keyuse_array=keyuse_array@entry=0x150988012af8) at /test/10.6_dbg/sql/sql_select.cc:5091

#12 0x000055948b664d9b in JOIN::optimize_inner (this=this@entry=0x150988012808) at /test/10.6_dbg/sql/sql_select.cc:2251

#13 0x000055948b66506c in JOIN::optimize (this=this@entry=0x150988012808) at /test/10.6_dbg/sql/sql_select.cc:1627

#14 0x000055948b6659ba in mysql_select (thd=thd@entry=0x150988000db8, tables=0x15098802bf50, fields=@0x15098802a5c0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x15098802aa18, last = 0x15098802aa18, elements = 1}, <No data fields>}, conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2201171004160, result=0x15098802ce50, unit=0x150988028910, select_lex=0x15098802a470) at /test/10.6_dbg/sql/sql_select.cc:4654

#15 0x000055948b665cd0 in handle_select (thd=thd@entry=0x150988000db8, lex=lex@entry=0x150988028848, result=result@entry=0x15098802ce50, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.6_dbg/sql/sql_select.cc:417

#16 0x000055948b5d819d in execute_sqlcom_select (thd=thd@entry=0x150988000db8, all_tables=0x15098802bf50) at /test/10.6_dbg/sql/sql_parse.cc:6116

#17 0x000055948b5e4c7c in mysql_execute_command (thd=0x150988000db8) at /test/10.6_dbg/sql/sql_parse.cc:3820

#18 0x000055948b5feceb in Prepared_statement::execute (this=this@entry=0x150988023d18, expanded_query=expanded_query@entry=0x1509cc160d30, open_cursor=open_cursor@entry=false) at /test/10.6_dbg/sql/sql_prepare.cc:5012

#19 0x000055948b5ff039 in Prepared_statement::execute_loop (this=this@entry=0x150988023d18, expanded_query=expanded_query@entry=0x1509cc160d30, open_cursor=open_cursor@entry=false, packet=packet@entry=0x0, packet_end=packet_end@entry=0x0) at /test/10.6_dbg/sql/sql_prepare.cc:4474

#20 0x000055948b5ff571 in mysql_sql_stmt_execute (thd=thd@entry=0x150988000db8) at /test/10.6_dbg/sql/sql_prepare.cc:3567

#21 0x000055948b5e4cdc in mysql_execute_command (thd=thd@entry=0x150988000db8) at /test/10.6_dbg/sql/sql_parse.cc:3836

#22 0x000055948b5d1072 in mysql_parse (thd=thd@entry=0x150988000db8, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x1509cc1613d0) at /test/10.6_dbg/sql/sql_parse.cc:7881

#23 0x000055948b5df1ec in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x150988000db8, packet=packet@entry=0x150988008d39 "EXECUTE s", packet_length=packet_length@entry=9) at /test/10.6_dbg/sql/sql_class.h:1293

#24 0x000055948b5e252d in do_command (thd=0x150988000db8) at /test/10.6_dbg/sql/sql_parse.cc:1348

#25 0x000055948b73e7fc in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55948f9ba438, put_in_cache=put_in_cache@entry=true) at /test/10.6_dbg/sql/sql_connect.cc:1410

#26 0x000055948b73ef03 in handle_one_connection (arg=arg@entry=0x55948f9ba438) at /test/10.6_dbg/sql/sql_connect.cc:1312

#27 0x000055948bbf488f in pfs_spawn_thread (arg=0x55948f906898) at /test/10.6_dbg/storage/perfschema/pfs.cc:2201

#28 0x00001509cd4d2609 in start_thread (arg=<optimized out>) at pthread_create.c:477

#29 0x00001509cd0c1293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Core was generated by `/test/MD010121-mariadb-10.6.0-linux-x86_64-opt/bin/mysqld --no-defaults --core-'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)

    at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

[Current thread is 1 (Thread 0x146bdc12b700 (LWP 1161493))]

(gdb) bt

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

#1  0x000055b61c10266f in my_write_core (sig=sig@entry=11) at /test/10.6_opt/mysys/stacktrace.c:424

#2  0x000055b61bb77d20 in handle_fatal_signal (sig=11) at /test/10.6_opt/sql/signal_handler.cc:330

#3  <signal handler called>

#4  0x000055b61bd9e3c1 in maria_scan_init (info=0x0) at /test/10.6_opt/storage/maria/ma_scan.c:24

#5  0x000055b61bb800f9 in handler::ha_rnd_init (scan=true, this=0x146b8c050290) at /test/10.6_opt/sql/handler.h:3376

#6  handler::read_first_row (this=0x146b8c050290, buf=0x146b8c04f6b8 "\377", primary_key=<optimized out>) at /test/10.6_opt/sql/handler.cc:3311

#7  0x000055b61b9b408c in handler::ha_read_first_row (primary_key=<optimized out>, buf=<optimized out>, this=0x146b8c050290) at /test/10.6_opt/sql/sql_class.h:7062

#8  join_read_system (tab=0x146b8c0114b0) at /test/10.6_opt/sql/sql_select.cc:21134

#9  0x000055b61b9bb89c in join_read_const_table (thd=0x146b8c000c58, tab=tab@entry=0x146b8c0114b0, pos=<optimized out>, pos=<optimized out>) at /test/10.6_opt/sql/sql_select.cc:21030

#10 0x000055b61b9d13dd in make_join_statistics (keyuse_array=0x146b8c010818, tables_list=@0x146b8c0205b0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x146b8c011198, last = 0x146b8c011198, elements = 1}, <No data fields>}, join=0x146b8c010528) at /test/10.6_opt/sql/sql_select.cc:5091

#11 JOIN::optimize_inner (this=0x146b8c010528) at /test/10.6_opt/sql/sql_select.cc:2251

#12 0x000055b61b9d3033 in JOIN::optimize (this=this@entry=0x146b8c010528) at /test/10.6_opt/sql/sql_select.cc:1627

#13 0x000055b61b9d30f7 in mysql_select (thd=0x146b8c000c58, tables=0x146b8c021e50, fields=<optimized out>, conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2201171004160, result=0x146b8c022d50, unit=0x146b8c01e810, select_lex=0x146b8c020370) at /test/10.6_opt/sql/sql_select.cc:4654

#14 0x000055b61b9d3b17 in handle_select (thd=thd@entry=0x146b8c000c58, lex=lex@entry=0x146b8c01e748, result=result@entry=0x146b8c022d50, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.6_opt/sql/sql_select.cc:417

#15 0x000055b61b962831 in execute_sqlcom_select (thd=0x146b8c000c58, all_tables=0x146b8c021e50) at /test/10.6_opt/sql/sql_parse.cc:6116

#16 0x000055b61b9705fe in mysql_execute_command (thd=0x146b8c000c58) at /test/10.6_opt/sql/sql_parse.cc:3820

#17 0x000055b61b981fe5 in Prepared_statement::execute (this=0x146b8c01daf8, expanded_query=<optimized out>, open_cursor=false) at /test/10.6_opt/sql/sql_prepare.cc:5012

#18 0x000055b61b9821b9 in Prepared_statement::execute_loop (packet=<optimized out>, packet_end=<optimized out>, open_cursor=<optimized out>, expanded_query=0x146bdc129e00, this=0x146b8c01daf8) at /test/10.6_opt/sql/sql_prepare.cc:4474

#19 Prepared_statement::execute_loop (this=0x146b8c01daf8, expanded_query=0x146bdc129e00, open_cursor=<optimized out>, packet=<optimized out>, packet_end=<optimized out>) at /test/10.6_opt/sql/sql_prepare.cc:4429

#20 0x000055b61b9824c3 in mysql_sql_stmt_execute (thd=thd@entry=0x146b8c000c58) at /test/10.6_opt/sql/sql_prepare.cc:3567

#21 0x000055b61b96eed3 in mysql_execute_command (thd=0x146b8c000c58) at /test/10.6_opt/sql/sql_parse.cc:3836

#22 0x000055b61b95d1df in mysql_parse (thd=0x146b8c000c58, rawbuf=<optimized out>, length=<optimized out>, parser_state=<optimized out>) at /test/10.6_opt/sql/sql_parse.cc:7881

#23 0x000055b61b968b27 in dispatch_command (command=COM_QUERY, thd=0x146b8c000c58, packet=0x146b8c008049 "EXECUTE s", packet_length=<optimized out>) at /test/10.6_opt/sql/sql_class.h:1293

#24 0x000055b61b96af42 in do_command (thd=0x146b8c000c58) at /test/10.6_opt/sql/sql_parse.cc:1348

#25 0x000055b61ba6fe81 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55b61ecf25c8, put_in_cache=put_in_cache@entry=true) at /test/10.6_opt/sql/sql_connect.cc:1410

#26 0x000055b61ba702fd in handle_one_connection (arg=arg@entry=0x55b61ecf25c8) at /test/10.6_opt/sql/sql_connect.cc:1312

#27 0x000055b61bdf5d76 in pfs_spawn_thread (arg=0x55b61ec603c8) at /test/10.6_opt/storage/perfschema/pfs.cc:2201

#28 0x0000146bdda63609 in start_thread (arg=<optimized out>) at pthread_create.c:477

#29 0x0000146bdd652293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Core was generated by `/test/MD010121-mariadb-10.2.37-linux-x86_64-dbg/bin/mysqld --no-defaults --core'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)

    at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

[Current thread is 1 (Thread 0x1548e80f4700 (LWP 1163443))]

(gdb) bt

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

#1  0x00005645bf426c2a in my_write_core (sig=sig@entry=11) at /test/10.2_dbg/mysys/stacktrace.c:382

#2  0x00005645bed1982b in handle_fatal_signal (sig=11) at /test/10.2_dbg/sql/signal_handler.cc:343

#3  <signal handler called>

#4  maria_status (info=0x0, x=x@entry=0x1548e80efad0, flag=flag@entry=18) at /test/10.2_dbg/storage/maria/ma_info.c:43

#5  0x00005645bf2a6bbf in ha_maria::info (this=0x15487c0321c8, flag=18) at /test/10.2_dbg/storage/maria/ha_maria.cc:2516

#6  0x00005645bebf52ab in TABLE_LIST::fetch_number_of_rows (this=this@entry=0x15487c0283c0) at /test/10.2_dbg/sql/table.cc:8298

#7  0x00005645beb7b7e0 in make_join_statistics (keyuse_array=0x15487c0115c8, tables_list=@0x15487c0262c0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x15487c011ef8, last = 0x15487c011ef8, elements = 1}, <No data fields>}, join=0x15487c0112d8) at /test/10.2_dbg/sql/sql_select.cc:3972

#8  JOIN::optimize_inner (this=this@entry=0x15487c0112d8) at /test/10.2_dbg/sql/sql_select.cc:1587

#9  0x00005645beb7ef7a in JOIN::optimize (this=this@entry=0x15487c0112d8) at /test/10.2_dbg/sql/sql_select.cc:1117

#10 0x00005645beb81085 in mysql_select (thd=thd@entry=0x15487c000d90, tables=0x15487c0283c0, wild_num=0, fields=@0x15487c0261e8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x15487c0270c0, last = 0x15487c0270c0, elements = 1}, <No data fields>}, conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2416184064, result=0x15487c0289e8, unit=0x15487c025980, select_lex=0x15487c0260c0) at /test/10.2_dbg/sql/sql_select.cc:3822

#11 0x00005645beb81b53 in handle_select (thd=thd@entry=0x15487c000d90, lex=lex@entry=0x15487c0258c0, result=result@entry=0x15487c0289e8, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.2_dbg/sql/sql_select.cc:361

#12 0x00005645beb06909 in execute_sqlcom_select (thd=thd@entry=0x15487c000d90, all_tables=0x15487c0283c0) at /test/10.2_dbg/sql/sql_parse.cc:6247

#13 0x00005645beb1099d in mysql_execute_command (thd=0x15487c000d90) at /test/10.2_dbg/sql/sql_parse.cc:3558

#14 0x00005645beb31c31 in Prepared_statement::execute (this=this@entry=0x15487c01f010, expanded_query=expanded_query@entry=0x1548e80f1da0, open_cursor=open_cursor@entry=false) at /test/10.2_dbg/sql/sql_prepare.cc:5027

#15 0x00005645beb321db in Prepared_statement::execute_loop (this=this@entry=0x15487c01f010, expanded_query=expanded_query@entry=0x1548e80f1da0, open_cursor=open_cursor@entry=false, packet=packet@entry=0x0, packet_end=packet_end@entry=0x0) at /test/10.2_dbg/sql/sql_prepare.cc:4456

#16 0x00005645beb3276e in mysql_sql_stmt_execute (thd=thd@entry=0x15487c000d90) at /test/10.2_dbg/sql/sql_prepare.cc:3564

#17 0x00005645beb109fd in mysql_execute_command (thd=thd@entry=0x15487c000d90) at /test/10.2_dbg/sql/sql_parse.cc:3574

#18 0x00005645beb19ea0 in mysql_parse (thd=thd@entry=0x15487c000d90, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x1548e80f3550, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /test/10.2_dbg/sql/sql_parse.cc:7762

#19 0x00005645beb1c9d9 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x15487c000d90, packet=packet@entry=0x15487c0195d1 "EXECUTE s", packet_length=packet_length@entry=9, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /test/10.2_dbg/sql/sql_class.h:1096

#20 0x00005645beb1f7e1 in do_command (thd=0x15487c000d90) at /test/10.2_dbg/sql/sql_parse.cc:1381

#21 0x00005645bec24a61 in do_handle_one_connection (connect=connect@entry=0x5645c2268410) at /test/10.2_dbg/sql/sql_connect.cc:1336

#22 0x00005645bec24c8c in handle_one_connection (arg=0x5645c2268410) at /test/10.2_dbg/sql/sql_connect.cc:1241

#23 0x00001548e9ee9609 in start_thread (arg=<optimized out>) at pthread_create.c:477

#24 0x00001548e9ae0293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Core was generated by `/test/MD010121-mariadb-10.2.37-linux-x86_64-opt/bin/mysqld --no-defaults --core'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)

    at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

[Current thread is 1 (Thread 0x1517e0075700 (LWP 1162821))]

(gdb) bt

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

#1  0x000055c4114f9eef in my_write_core (sig=sig@entry=11) at /test/10.2_opt/mysys/stacktrace.c:382

#2  0x000055c410fa02d8 in handle_fatal_signal (sig=11) at /test/10.2_opt/sql/signal_handler.cc:343

#3  <signal handler called>

#4  0x000055c411377988 in maria_status (info=0x0, x=x@entry=0x1517e0070a60, flag=flag@entry=18) at /test/10.2_opt/storage/maria/ma_info.c:43

#5  0x000055c411383641 in ha_maria::info (this=0x15179001cb50, flag=18) at /test/10.2_opt/storage/maria/ha_maria.cc:2516

#6  0x000055c410e43ccc in make_join_statistics (join=0x15179000f3d0, tables_list=@0x1517900202e8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x15179000fff0, last = 0x15179000fff0, elements = 1}, <No data fields>}, keyuse_array=0x15179000f6c0) at /test/10.2_opt/sql/sql_select.cc:3972

#7  0x000055c410e4cbf0 in JOIN::optimize_inner (this=0x15179000f3d0) at /test/10.2_opt/sql/sql_select.cc:1587

#8  0x000055c410e4f9a9 in JOIN::optimize (this=0x15179000f3d0) at /test/10.2_opt/sql/sql_select.cc:1117

#9  JOIN::optimize (this=0x15179000f3d0) at /test/10.2_opt/sql/sql_select.cc:1109

#10 0x000055c410e51ae8 in mysql_select (thd=0x151790000c48, tables=0x1517900223e8, wild_num=0, fields=<optimized out>, conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2416184064, result=0x151790022a10, unit=0x15179001f9a8, select_lex=0x1517900200e8) at /test/10.2_opt/sql/sql_select.cc:3822

#11 0x000055c410e51db7 in handle_select (thd=thd@entry=0x151790000c48, lex=lex@entry=0x15179001f8e8, result=result@entry=0x151790022a10, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.2_opt/sql/sql_select.cc:361

#12 0x000055c410de7411 in execute_sqlcom_select (thd=0x151790000c48, all_tables=0x1517900223e8) at /test/10.2_opt/sql/sql_parse.cc:6247

#13 0x000055c410df4ad5 in mysql_execute_command (thd=0x151790000c48) at /test/10.2_opt/sql/sql_parse.cc:3558

#14 0x000055c410e0ca16 in Prepared_statement::execute (this=0x15179001a188, expanded_query=<optimized out>, open_cursor=false) at /test/10.2_opt/sql/sql_prepare.cc:5027

#15 0x000055c410e0cc1d in Prepared_statement::execute_loop (packet=<optimized out>, packet_end=<optimized out>, open_cursor=<optimized out>, expanded_query=0x1517e0072e60, this=0x15179001a188) at /test/10.2_opt/sql/sql_prepare.cc:4456

#16 Prepared_statement::execute_loop (this=0x15179001a188, expanded_query=0x1517e0072e60, open_cursor=<optimized out>, packet=<optimized out>, packet_end=<optimized out>) at /test/10.2_opt/sql/sql_prepare.cc:4402

#17 0x000055c410e0d0f9 in mysql_sql_stmt_execute (thd=thd@entry=0x151790000c48) at /test/10.2_opt/sql/sql_prepare.cc:3564

#18 0x000055c410df225b in mysql_execute_command (thd=0x151790000c48) at /test/10.2_opt/sql/sql_parse.cc:3574

#19 0x000055c410df7a7b in mysql_parse (thd=thd@entry=0x151790000c48, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x1517e0074560, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /test/10.2_opt/sql/sql_parse.cc:7762

#20 0x000055c410dfac7d in dispatch_command (command=COM_QUERY, thd=0x151790000c48, packet=<optimized out>, packet_length=<optimized out>, is_com_multi=<optimized out>, is_next_command=<optimized out>) at /test/10.2_opt/sql/sql_class.h:1096

#21 0x000055c410dfbec7 in do_command (thd=0x151790000c48) at /test/10.2_opt/sql/sql_parse.cc:1381

#22 0x000055c410ed4a16 in do_handle_one_connection (connect=connect@entry=0x55c41425d1a8) at /test/10.2_opt/sql/sql_connect.cc:1336

#23 0x000055c410ed4b8f in handle_one_connection (arg=0x55c41425d1a8) at /test/10.2_opt/sql/sql_connect.cc:1241

#24 0x00001517f9d81609 in start_thread (arg=<optimized out>) at pthread_create.c:477

#25 0x00001517f9978293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95