Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-27224

ASAN heap-use-after-free in rec_convert_dtuple_to_rec_comp upon LOAD DATA with foreign keys and STORED unique blobs

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • 10.4(EOL), 10.5, 10.6, 10.7(EOL)
    • 10.5, 10.6
    • Virtual Columns
    • None

    Description

      There are similarities with MDEV-27223, but the most important difference is that this issue happens with STORED (persistent) virtual columns, while MDEV-27223 only with non-persistent ones.

      --source include/have_innodb.inc
       
      CREATE TABLE t1 (a CHAR(8), b BLOB, c BLOB AS (b) STORED, UNIQUE(a,c), INDEX(a)) ENGINE=InnoDB;
      INSERT IGNORE INTO t1 (a,b) VALUES ('foo','bar');
      CREATE TABLE t2 (f CHAR(8), FOREIGN KEY (f) REFERENCES t1 (a)) ENGINE=InnoDB;
       
      SELECT * INTO OUTFILE 't1.data' FROM t1;
      LOAD DATA INFILE 't1.data' REPLACE INTO TABLE t1;
       
      # Cleanup
      --let $datadir= `SELECT @@datadir`
      --remove_file $datadir/test/t1.data
       
      DROP TABLE t2, t1;
      

      10.4 74b3d4252

      ==3861636==ERROR: AddressSanitizer: heap-use-after-free on address 0x60c00003c0b0 at pc 0x7f5753e81480 bp 0x7f573cb28a30 sp 0x7f573cb281d8
      READ of size 3 at 0x60c00003c0b0 thread T27
          #0 0x7f5753e8147f  (/lib/x86_64-linux-gnu/libasan.so.5+0x9b47f)
          #1 0x55f07ffb1479 in rec_convert_dtuple_to_rec_comp<> /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1709
          #2 0x55f07ff9e2d2 in rec_convert_dtuple_to_rec_new /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1755
          #3 0x55f07ff9e63a in rec_convert_dtuple_to_rec(unsigned char*, dict_index_t const*, dtuple_t const*, unsigned long) /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1787
          #4 0x55f0802679a6 in page_cur_tuple_insert /data/src/10.4-bug/storage/innobase/include/page0cur.ic:272
          #5 0x55f08028056d in btr_cur_optimistic_insert(unsigned long, btr_cur_t*, unsigned short**, mem_block_info_t**, dtuple_t*, unsigned char**, big_rec_t**, unsigned long, que_thr_t*, mtr_t*) /data/src/10.4-bug/storage/innobase/btr/btr0cur.cc:3609
          #6 0x55f08000814b in row_ins_clust_index_entry_low(unsigned long, unsigned long, dict_index_t*, unsigned long, dtuple_t*, unsigned long, que_thr_t*) /data/src/10.4-bug/storage/innobase/row/row0ins.cc:2741
          #7 0x55f08000ac68 in row_ins_clust_index_entry(dict_index_t*, dtuple_t*, que_thr_t*, unsigned long) /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3216
          #8 0x55f08000b6eb in row_ins_index_entry /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3342
          #9 0x55f08000c858 in row_ins_index_entry_step /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3511
          #10 0x55f08000d331 in row_ins /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3670
          #11 0x55f08000e5e9 in row_ins_step(que_thr_t*) /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3820
          #12 0x55f080057f35 in row_insert_for_mysql(unsigned char const*, row_prebuilt_t*, ins_mode_t) /data/src/10.4-bug/storage/innobase/row/row0mysql.cc:1401
          #13 0x55f07fce260f in ha_innobase::write_row(unsigned char const*) /data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc:8112
          #14 0x55f07f3400c5 in handler::ha_write_row(unsigned char const*) /data/src/10.4-bug/sql/handler.cc:6771
          #15 0x55f07eab71ee in write_record(THD*, TABLE*, st_copy_info*) /data/src/10.4-bug/sql/sql_insert.cc:1747
          #16 0x55f07eb45a06 in read_sep_field /data/src/10.4-bug/sql/sql_load.cc:1164
          #17 0x55f07eb41bbc in mysql_load(THD*, sql_exchange const*, TABLE_LIST*, List<Item>&, List<Item>&, List<Item>&, enum_duplicates, bool, bool) /data/src/10.4-bug/sql/sql_load.cc:669
          #18 0x55f07eb72a37 in mysql_execute_command(THD*) /data/src/10.4-bug/sql/sql_parse.cc:5008
          #19 0x55f07eb86f04 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4-bug/sql/sql_parse.cc:7995
          #20 0x55f07eb5d68b in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4-bug/sql/sql_parse.cc:1857
          #21 0x55f07eb5a108 in do_command(THD*) /data/src/10.4-bug/sql/sql_parse.cc:1373
          #22 0x55f07ef54a2c in do_handle_one_connection(CONNECT*) /data/src/10.4-bug/sql/sql_connect.cc:1420
          #23 0x55f07ef54185 in handle_one_connection /data/src/10.4-bug/sql/sql_connect.cc:1316
          #24 0x55f07fbd7e74 in pfs_spawn_thread /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
          #25 0x7f5753847608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
          #26 0x7f575341a292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
       
      0x60c00003c0b0 is located 112 bytes inside of 124-byte region [0x60c00003c040,0x60c00003c0bc)
      freed by thread T27 here:
          #0 0x7f5753ef37cf in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.5+0x10d7cf)
          #1 0x55f080767260 in free_memory /data/src/10.4-bug/mysys/safemalloc.c:279
          #2 0x55f08076681c in sf_free /data/src/10.4-bug/mysys/safemalloc.c:197
          #3 0x55f08073521a in my_free /data/src/10.4-bug/mysys/my_malloc.c:222
          #4 0x55f07e884bc1 in Binary_string::free() /data/src/10.4-bug/sql/sql_string.h:610
          #5 0x55f07e8ce46d in Binary_string::set(char const*, unsigned long) /data/src/10.4-bug/sql/sql_string.h:467
          #6 0x55f07e8ce4be in String::set(char const*, unsigned long, charset_info_st const*) /data/src/10.4-bug/sql/sql_string.h:769
          #7 0x55f07f2b6d0d in Field_blob::val_str(String*, String*) /data/src/10.4-bug/sql/field.cc:8609
          #8 0x55f07e8abc07 in Field::val_str(String*) /data/src/10.4-bug/sql/field.h:857
          #9 0x55f07f2e2d1c in Field_blob::store_field(Field*) /data/src/10.4-bug/sql/field.h:3942
          #10 0x55f07f2f16f3 in field_conv_incompatible /data/src/10.4-bug/sql/field_conv.cc:851
          #11 0x55f07f2f1794 in field_conv(Field*, Field*) /data/src/10.4-bug/sql/field_conv.cc:864
          #12 0x55f07f38cf6e in save_field_in_field /data/src/10.4-bug/sql/item.cc:6571
          #13 0x55f07f38d73a in Item_field::save_in_field(Field*, bool) /data/src/10.4-bug/sql/item.cc:6622
          #14 0x55f07f35e954 in Item_field::update_vcol_processor(void*) /data/src/10.4-bug/sql/item.cc:949
          #15 0x55f07e8b2efe in Item::walk(bool (Item::*)(void*), bool, void*) /data/src/10.4-bug/sql/item.h:1865
          #16 0x55f07ea0373c in Item_args::walk_args(bool (Item::*)(void*), bool, void*) /data/src/10.4-bug/sql/item.h:2579
          #17 0x55f07ea046d5 in Item_func_or_sum::walk(bool (Item::*)(void*), bool, void*) /data/src/10.4-bug/sql/item.h:5264
          #18 0x55f07eea792f in TABLE::update_virtual_field(Field*) /data/src/10.4-bug/sql/table.cc:8463
          #19 0x55f07fd1b634 in innobase_get_computed_value(dtuple_t*, dict_v_col_t const*, dict_index_t const*, mem_block_info_t**, mem_block_info_t*, dict_field_t const*, THD*, TABLE*, unsigned char*, dict_table_t const*, upd_t const*) /data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc:20859
          #20 0x55f08010f305 in row_upd_store_v_row /data/src/10.4-bug/storage/innobase/row/row0upd.cc:2161
          #21 0x55f08010fa66 in row_upd_store_row /data/src/10.4-bug/storage/innobase/row/row0upd.cc:2230
          #22 0x55f080114daa in row_upd_del_mark_clust_rec /data/src/10.4-bug/storage/innobase/row/row0upd.cc:3001
          #23 0x55f080115e7f in row_upd_clust_step /data/src/10.4-bug/storage/innobase/row/row0upd.cc:3173
          #24 0x55f080116b52 in row_upd /data/src/10.4-bug/storage/innobase/row/row0upd.cc:3295
          #25 0x55f080117ae6 in row_upd_step(que_thr_t*) /data/src/10.4-bug/storage/innobase/row/row0upd.cc:3439
          #26 0x55f08005b1ab in row_update_for_mysql(row_prebuilt_t*) /data/src/10.4-bug/storage/innobase/row/row0mysql.cc:1809
          #27 0x55f07fce7e20 in ha_innobase::delete_row(unsigned char const*) /data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc:9013
          #28 0x55f07f341e4a in handler::ha_delete_row(unsigned char const*) /data/src/10.4-bug/sql/handler.cc:6892
          #29 0x55f07eab9aee in write_record(THD*, TABLE*, st_copy_info*) /data/src/10.4-bug/sql/sql_insert.cc:2023
       
      previously allocated by thread T27 here:
          #0 0x7f5753ef3bc8 in malloc (/lib/x86_64-linux-gnu/libasan.so.5+0x10dbc8)
          #1 0x55f0807661d0 in sf_malloc /data/src/10.4-bug/mysys/safemalloc.c:118
          #2 0x55f080734723 in my_malloc /data/src/10.4-bug/mysys/my_malloc.c:101
          #3 0x55f07ed967e1 in Binary_string::realloc_raw(unsigned long) /data/src/10.4-bug/sql/sql_string.cc:101
          #4 0x55f07e884c8a in Binary_string::realloc(unsigned long) /data/src/10.4-bug/sql/sql_string.h:625
          #5 0x55f07ed97649 in Binary_string::copy() /data/src/10.4-bug/sql/sql_string.cc:220
          #6 0x55f07f2d0c7f in String::copy() /data/src/10.4-bug/sql/sql_string.h:823
          #7 0x55f07f2e2e25 in Field_blob::store_field(Field*) /data/src/10.4-bug/sql/field.h:3945
          #8 0x55f07f2f16f3 in field_conv_incompatible /data/src/10.4-bug/sql/field_conv.cc:851
          #9 0x55f07f2f1794 in field_conv(Field*, Field*) /data/src/10.4-bug/sql/field_conv.cc:864
          #10 0x55f07f38cf6e in save_field_in_field /data/src/10.4-bug/sql/item.cc:6571
          #11 0x55f07f38d73a in Item_field::save_in_field(Field*, bool) /data/src/10.4-bug/sql/item.cc:6622
          #12 0x55f07eea7147 in TABLE::update_virtual_fields(handler*, enum_vcol_update_mode) /data/src/10.4-bug/sql/table.cc:8427
          #13 0x55f07e9fb28d in fill_record(THD*, TABLE*, List<Item>&, List<Item>&, bool, bool) /data/src/10.4-bug/sql/sql_base.cc:8626
          #14 0x55f07e9fbef4 in fill_record_n_invoke_before_triggers(THD*, TABLE*, List<Item>&, List<Item>&, bool, trg_event_type) /data/src/10.4-bug/sql/sql_base.cc:8754
          #15 0x55f07eb458f6 in read_sep_field /data/src/10.4-bug/sql/sql_load.cc:1149
          #16 0x55f07eb41bbc in mysql_load(THD*, sql_exchange const*, TABLE_LIST*, List<Item>&, List<Item>&, List<Item>&, enum_duplicates, bool, bool) /data/src/10.4-bug/sql/sql_load.cc:669
          #17 0x55f07eb72a37 in mysql_execute_command(THD*) /data/src/10.4-bug/sql/sql_parse.cc:5008
          #18 0x55f07eb86f04 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4-bug/sql/sql_parse.cc:7995
          #19 0x55f07eb5d68b in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4-bug/sql/sql_parse.cc:1857
          #20 0x55f07eb5a108 in do_command(THD*) /data/src/10.4-bug/sql/sql_parse.cc:1373
          #21 0x55f07ef54a2c in do_handle_one_connection(CONNECT*) /data/src/10.4-bug/sql/sql_connect.cc:1420
          #22 0x55f07ef54185 in handle_one_connection /data/src/10.4-bug/sql/sql_connect.cc:1316
          #23 0x55f07fbd7e74 in pfs_spawn_thread /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
          #24 0x7f5753847608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
       
      Thread T27 created by T0 here:
          #0 0x7f5753e20805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805)
          #1 0x55f07fbd8265 in spawn_thread_v1 /data/src/10.4-bug/storage/perfschema/pfs.cc:1919
          #2 0x55f07e85fbdf in inline_mysql_thread_create /data/src/10.4-bug/include/mysql/psi/mysql_thread.h:1275
          #3 0x55f07e877ae4 in create_thread_to_handle_connection(CONNECT*) /data/src/10.4-bug/sql/mysqld.cc:6241
          #4 0x55f07e87827f in create_new_thread(CONNECT*) /data/src/10.4-bug/sql/mysqld.cc:6311
          #5 0x55f07e878765 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4-bug/sql/mysqld.cc:6409
          #6 0x55f07e879632 in handle_connections_sockets() /data/src/10.4-bug/sql/mysqld.cc:6567
          #7 0x55f07e8771d8 in mysqld_main(int, char**) /data/src/10.4-bug/sql/mysqld.cc:5899
          #8 0x55f07e85de2c in main /data/src/10.4-bug/sql/main.cc:25
          #9 0x7f575331f0b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
       
      SUMMARY: AddressSanitizer: heap-use-after-free (/lib/x86_64-linux-gnu/libasan.so.5+0x9b47f) 
      Shadow bytes around the buggy address:
        0x0c187ffff7c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c187ffff7d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c187ffff7e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c187ffff7f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c187ffff800: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
      =>0x0c187ffff810: fd fd fd fd fd fd[fd]fd fa fa fa fa fa fa fa fa
        0x0c187ffff820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04
        0x0c187ffff830: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
        0x0c187ffff840: 00 00 00 00 00 00 00 04 fa fa fa fa fa fa fa fa
        0x0c187ffff850: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c187ffff860: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
        Left alloca redzone:     ca
        Right alloca redzone:    cb
        Shadow gap:              cc
      ==3861636==ABORTING
      211211  1:06:40 [ERROR] mysqld got signal 6 ;
      This could be because you hit a bug. It is also possible that this binary
      or one of the libraries it was linked against is corrupt, improperly built,
      or misconfigured. This error can also be caused by malfunctioning hardware.
       
      To report this bug, see https://mariadb.com/kb/en/reporting-bugs
       
      We will try our best to scrape up some info that will hopefully help
      diagnose the problem, but since we have already crashed, 
      something is definitely wrong and this may fail.
       
      Server version: 10.4.23-MariaDB-debug-log
      key_buffer_size=1048576
      read_buffer_size=131072
      max_used_connections=1
      max_threads=153
      thread_count=6
      It is possible that mysqld could use up to 
      key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63649 K  bytes of memory
      Hope that's ok; if not, decrease some variables in the equation.
       
      Thread pointer: 0x62b00009a270
      Attempting backtrace. You can use the following information to find out
      where mysqld died. If you see no messages after this, something went
      terribly wrong...
      stack_bottom = 0x7f573cb2e910 thread_stack 0x5fc00
      /lib/x86_64-linux-gnu/libasan.so.5(+0x6cd30)[0x7f5753e52d30]
      mysys/stacktrace.c:174(my_print_stacktrace)[0x55f0807445c5]
      sql/signal_handler.cc:222(handle_fatal_signal)[0x55f07f30703b]
      sigaction.c:0(__restore_rt)[0x7f57538533c0]
      /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xcb)[0x7f575333e18b]
      /lib/x86_64-linux-gnu/libc.so.6(abort+0x12b)[0x7f575331d859]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x12b6a2)[0x7f5753f116a2]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x13624c)[0x7f5753f1c24c]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x1178ec)[0x7f5753efd8ec]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x117363)[0x7f5753efd363]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x9b49f)[0x7f5753e8149f]
      rem/rem0rec.cc:1710(void rec_convert_dtuple_to_rec_comp<false, false>(unsigned char*, dict_index_t const*, dfield_t const*, unsigned long, rec_comp_status_t, bool))[0x55f07ffb147a]
      rem/rem0rec.cc:1760(rec_convert_dtuple_to_rec_new(unsigned char*, dict_index_t const*, dtuple_t const*))[0x55f07ff9e2d3]
      rem/rem0rec.cc:1787(rec_convert_dtuple_to_rec(unsigned char*, dict_index_t const*, dtuple_t const*, unsigned long))[0x55f07ff9e63b]
      include/page0cur.ic:272(page_cur_tuple_insert(page_cur_t*, dtuple_t const*, dict_index_t*, unsigned short**, mem_block_info_t**, unsigned long, mtr_t*))[0x55f0802679a7]
      btr/btr0cur.cc:3609(btr_cur_optimistic_insert(unsigned long, btr_cur_t*, unsigned short**, mem_block_info_t**, dtuple_t*, unsigned char**, big_rec_t**, unsigned long, que_thr_t*, mtr_t*))[0x55f08028056e]
      row/row0ins.cc:2741(row_ins_clust_index_entry_low(unsigned long, unsigned long, dict_index_t*, unsigned long, dtuple_t*, unsigned long, que_thr_t*))[0x55f08000814c]
      row/row0ins.cc:3216(row_ins_clust_index_entry(dict_index_t*, dtuple_t*, que_thr_t*, unsigned long))[0x55f08000ac69]
      row/row0ins.cc:3342(row_ins_index_entry(dict_index_t*, dtuple_t*, que_thr_t*))[0x55f08000b6ec]
      row/row0ins.cc:3511(row_ins_index_entry_step(ins_node_t*, que_thr_t*))[0x55f08000c859]
      row/row0ins.cc:3670(row_ins(ins_node_t*, que_thr_t*))[0x55f08000d332]
      row/row0ins.cc:3820(row_ins_step(que_thr_t*))[0x55f08000e5ea]
      row/row0mysql.cc:1403(row_insert_for_mysql(unsigned char const*, row_prebuilt_t*, ins_mode_t))[0x55f080057f36]
      handler/ha_innodb.cc:8112(ha_innobase::write_row(unsigned char const*))[0x55f07fce2610]
      sql/handler.cc:6771(handler::ha_write_row(unsigned char const*))[0x55f07f3400c6]
      sql/sql_insert.cc:1747(write_record(THD*, TABLE*, st_copy_info*))[0x55f07eab71ef]
      sql/sql_load.cc:1164(read_sep_field(THD*, st_copy_info&, TABLE_LIST*, List<Item>&, List<Item>&, List<Item>&, READ_INFO&, String&, unsigned long, bool))[0x55f07eb45a07]
      sql/sql_load.cc:669(mysql_load(THD*, sql_exchange const*, TABLE_LIST*, List<Item>&, List<Item>&, List<Item>&, enum_duplicates, bool, bool))[0x55f07eb41bbd]
      sql/sql_parse.cc:5008(mysql_execute_command(THD*))[0x55f07eb72a38]
      sql/sql_parse.cc:7995(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55f07eb86f05]
      sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55f07eb5d68c]
      sql/sql_parse.cc:1373(do_command(THD*))[0x55f07eb5a109]
      sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x55f07ef54a2d]
      sql/sql_connect.cc:1317(handle_one_connection)[0x55f07ef54186]
      perfschema/pfs.cc:1871(pfs_spawn_thread)[0x55f07fbd7e75]
      nptl/pthread_create.c:478(start_thread)[0x7f5753847609]
      /lib/x86_64-linux-gnu/libc.so.6(clone+0x43)[0x7f575341a293]
       
      Trying to get some variables.
      Some pointers may be invalid and cause the dump to abort.
      Query (0x62b0000a1290): LOAD DATA INFILE 't1.data' REPLACE INTO TABLE t1
       
      Connection ID (thread ID): 9
      Status: NOT_KILLED
       
      Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on
       
      The manual page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mysqld/ contains
      information that should help you find out what is causing the crash.
      Writing a core file...
      Working directory at /dev/shm/var_auto_MHP_/mysqld.1/data
      Resource Limits:
      Limit                     Soft Limit           Hard Limit           Units     
      Max cpu time              unlimited            unlimited            seconds   
      Max file size             unlimited            unlimited            bytes     
      Max data size             unlimited            unlimited            bytes     
      Max stack size            8388608              unlimited            bytes     
      Max core file size        unlimited            unlimited            bytes     
      Max resident set          unlimited            unlimited            bytes     
      Max processes             385674               385674               processes 
      Max open files            1024                 1024                 files     
      Max locked memory         67108864             67108864             bytes     
      Max address space         unlimited            unlimited            bytes     
      Max file locks            unlimited            unlimited            locks     
      Max pending signals       385674               385674               signals   
      Max msgqueue size         819200               819200               bytes     
      Max nice priority         0                    0                    
      Max realtime priority     0                    0                    
      Max realtime timeout      unlimited            unlimited            us        
      Core pattern: core
       
      ----------SERVER LOG END-------------
       
       
       - found 'core' (0/5)
       
      Trying 'dbx' to get a backtrace
       
      Trying 'gdb' to get a backtrace from coredump /mnt-hd8t/src/10.4-bug/mysql-test/var/log/bug.dtuple1-innodb/mysqld.1/data/core
      Core generated by '/mnt-hd8t/src/10.4-bug/sql/mysqld'
      Output from gdb follows. The first stack trace is from the failing thread.
      The following stack traces are from all threads (so the failing one is
      duplicated).
      --------------------------
      [New LWP 3861665]
      [New LWP 3861637]
      [New LWP 3861641]
      [New LWP 3861640]
      [New LWP 3861642]
      [New LWP 3861638]
      [New LWP 3861639]
      [New LWP 3861648]
      [New LWP 3861652]
      [New LWP 3861656]
      [New LWP 3861651]
      [New LWP 3861658]
      [New LWP 3861643]
      [New LWP 3861647]
      [New LWP 3861644]
      [New LWP 3861650]
      [New LWP 3861653]
      [New LWP 3861659]
      [New LWP 3861645]
      [New LWP 3861661]
      [New LWP 3861662]
      [New LWP 3861660]
      [New LWP 3861636]
      [New LWP 3861657]
      [New LWP 3861655]
      [New LWP 3861649]
      [New LWP 3861654]
      [Thread debugging using libthread_db enabled]
      Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
      Core was generated by `/mnt-hd8t/src/10.4-bug/sql/mysqld --defaults-group-suffix=.1 --defaults-file=/m'.
      Program terminated with signal SIGABRT, Aborted.
      #0  __pthread_kill (threadid=<optimized out>, signo=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56
      56	../sysdeps/unix/sysv/linux/pthread_kill.c: No such file or directory.
      [Current thread is 1 (Thread 0x7f573cb2f300 (LWP 3861665))]
      #0  __pthread_kill (threadid=<optimized out>, signo=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56
      #1  0x000055f080744747 in my_write_core (sig=6) at /data/src/10.4-bug/mysys/stacktrace.c:386
      #2  0x000055f07f307632 in handle_fatal_signal (sig=6) at /data/src/10.4-bug/sql/signal_handler.cc:356
      #3  <signal handler called>
      #4  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
      #5  0x00007f575331d859 in __GI_abort () at abort.c:79
      #6  0x00007f5753f116a2 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #7  0x00007f5753f1c24c in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #8  0x00007f5753efd8ec in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #9  0x00007f5753efd363 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #10 0x00007f5753e8149f in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #11 0x000055f07ffb147a in rec_convert_dtuple_to_rec_comp<>(rec_t *, const dict_index_t *, const dfield_t *, ulint, rec_comp_status_t, bool) (rec=0x611000064350 "", index=0x617000048408, field=0x616000056bb8, n_fields=6, status=REC_STATUS_ORDINARY, temp=false) at /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1709
      #12 0x000055f07ff9e2d3 in rec_convert_dtuple_to_rec_new (buf=0x611000064350 "", index=0x617000048408, dtuple=0x616000056b08) at /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1755
      #13 0x000055f07ff9e63b in rec_convert_dtuple_to_rec (buf=0x611000064348 "\003\003", index=0x617000048408, dtuple=0x616000056b08, n_ext=0) at /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1787
      #14 0x000055f0802679a7 in page_cur_tuple_insert (cursor=0x7f573cb29618, tuple=0x616000056b08, index=0x617000048408, offsets=0x7f573cb29590, heap=0x7f573cb29570, n_ext=0, mtr=0x7f573cb29a20) at /data/src/10.4-bug/storage/innobase/include/page0cur.ic:272
      #15 0x000055f08028056e in btr_cur_optimistic_insert (flags=0, cursor=0x7f573cb29610, offsets=0x7f573cb29590, heap=0x7f573cb29570, entry=0x616000056b08, rec=0x7f573cb295b0, big_rec=0x7f573cb29550, n_ext=0, thr=0x6210000bd880, mtr=0x7f573cb29a20) at /data/src/10.4-bug/storage/innobase/btr/btr0cur.cc:3609
      #16 0x000055f08000814c in row_ins_clust_index_entry_low (flags=0, mode=2, index=0x617000048408, n_uniq=0, entry=0x616000056b08, n_ext=0, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:2741
      #17 0x000055f08000ac69 in row_ins_clust_index_entry (index=0x617000048408, entry=0x616000056b08, thr=0x6210000bd880, n_ext=0) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3216
      #18 0x000055f08000b6ec in row_ins_index_entry (index=0x617000048408, entry=0x616000056b08, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3342
      #19 0x000055f08000c859 in row_ins_index_entry_step (node=0x6210000bd5d0, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3511
      #20 0x000055f08000d332 in row_ins (node=0x6210000bd5d0, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3670
      #21 0x000055f08000e5ea in row_ins_step (thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3820
      #22 0x000055f080057f36 in row_insert_for_mysql (mysql_rec=0x6190000f1020 "\360foo     \003", prebuilt=0x6210000bcd88, ins_mode=ROW_INS_NORMAL) at /data/src/10.4-bug/storage/innobase/row/row0mysql.cc:1401
      #23 0x000055f07fce2610 in ha_innobase::write_row (this=0x61d000249110, record=0x6190000f1020 "\360foo     \003") at /data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc:8112
      #24 0x000055f07f3400c6 in handler::ha_write_row (this=0x61d000249110, buf=0x6190000f1020 "\360foo     \003") at /data/src/10.4-bug/sql/handler.cc:6771
      #25 0x000055f07eab71ef in write_record (thd=0x62b00009a270, table=0x62000003d0f0, info=0x7f573cb2b440) at /data/src/10.4-bug/sql/sql_insert.cc:1747
      #26 0x000055f07eb45a07 in read_sep_field (thd=0x62b00009a270, info=..., table_list=0x62b0000a1430, fields_vars=..., set_fields=..., set_values=..., read_info=..., enclosed=..., skip_lines=0, ignore_check_option_errors=false) at /data/src/10.4-bug/sql/sql_load.cc:1164
      #27 0x000055f07eb41bbd in mysql_load (thd=0x62b00009a270, ex=0x62b0000a1388, table_list=0x62b0000a1430, fields_vars=..., set_fields=..., set_values=..., handle_duplicates=DUP_REPLACE, ignore=false, read_file_from_client=false) at /data/src/10.4-bug/sql/sql_load.cc:669
      #28 0x000055f07eb72a38 in mysql_execute_command (thd=0x62b00009a270) at /data/src/10.4-bug/sql/sql_parse.cc:5008
      #29 0x000055f07eb86f05 in mysql_parse (thd=0x62b00009a270, rawbuf=0x62b0000a1290 "LOAD DATA INFILE 't1.data' REPLACE INTO TABLE t1", length=48, parser_state=0x7f573cb2d780, is_com_multi=false, is_next_command=false) at /data/src/10.4-bug/sql/sql_parse.cc:7995
      #30 0x000055f07eb5d68c in dispatch_command (command=COM_QUERY, thd=0x62b00009a270, packet=0x629000299271 "LOAD DATA INFILE 't1.data' REPLACE INTO TABLE t1", packet_length=48, is_com_multi=false, is_next_command=false) at /data/src/10.4-bug/sql/sql_parse.cc:1857
      #31 0x000055f07eb5a109 in do_command (thd=0x62b00009a270) at /data/src/10.4-bug/sql/sql_parse.cc:1373
      #32 0x000055f07ef54a2d in do_handle_one_connection (connect=0x6110000434f0) at /data/src/10.4-bug/sql/sql_connect.cc:1420
      #33 0x000055f07ef54186 in handle_one_connection (arg=0x6110000434f0) at /data/src/10.4-bug/sql/sql_connect.cc:1316
      #34 0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x61600003fff0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #35 0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #36 0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 27 (Thread 0x7f57416d1700 (LWP 3861654)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x60b00000133c) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x60b0000012e8, cond=0x60b000001310) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x60b000001310, mutex=0x60b0000012e8) at pthread_cond_wait.c:638
      #3  0x000055f07ff1515c in os_event::wait (this=0x60b0000012d0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:158
      #4  0x000055f07ff14821 in os_event::wait_low (this=0x60b0000012d0, reset_sig_count=14) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:325
      #5  0x000055f07ff14dec in os_event_wait_low (event=0x60b0000012d0, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:502
      #6  0x000055f080133fb0 in srv_resume_thread (slot=0x55f081e467f8 <srv_sys+1080>, sig_count=0, wait=true, timeout_usec=0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:904
      #7  0x000055f08013ab83 in srv_worker_thread (arg=0x0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2518
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 26 (Thread 0x7f5744ed8700 (LWP 3861649)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f5744ed7d00, clockid=<optimized out>, expected=0, futex_word=0x60b000001548) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f5744ed7d00, clockid=<optimized out>, mutex=0x60b0000014f8, cond=0x60b000001520) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x60b000001520, mutex=0x60b0000014f8, abstime=0x7f5744ed7d00) at pthread_cond_wait.c:656
      #3  0x000055f07ff1443b in os_event::timed_wait (this=0x60b0000014e0, abstime=0x7f5744ed7d00) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:275
      #4  0x000055f07ff14b41 in os_event::wait_time_low (this=0x60b0000014e0, time_in_usec=5000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:385
      #5  0x000055f07ff14dc3 in os_event_wait_time_low (event=0x60b0000014e0, time_in_usec=5000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:485
      #6  0x000055f08013703e in srv_monitor_thread () at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:1684
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 25 (Thread 0x7f5740ed0700 (LWP 3861655)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x60b00000128c) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x60b000001238, cond=0x60b000001260) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x60b000001260, mutex=0x60b000001238) at pthread_cond_wait.c:638
      #3  0x000055f07ff1515c in os_event::wait (this=0x60b000001220) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:158
      #4  0x000055f07ff14821 in os_event::wait_low (this=0x60b000001220, reset_sig_count=14) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:325
      #5  0x000055f07ff14dec in os_event_wait_low (event=0x60b000001220, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:502
      #6  0x000055f080133fb0 in srv_resume_thread (slot=0x55f081e46700 <srv_sys+832>, sig_count=0, wait=true, timeout_usec=0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:904
      #7  0x000055f08013ab83 in srv_worker_thread (arg=0x0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2518
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 24 (Thread 0x7f573fece700 (LWP 3861657)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x60b0000015f8) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x60b0000015a8, cond=0x60b0000015d0) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x60b0000015d0, mutex=0x60b0000015a8) at pthread_cond_wait.c:638
      #3  0x000055f07ff1515c in os_event::wait (this=0x60b000001590) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:158
      #4  0x000055f07ff14821 in os_event::wait_low (this=0x60b000001590, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:325
      #5  0x000055f07ff14dec in os_event_wait_low (event=0x60b000001590, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:502
      #6  0x000055f08032b779 in buf_dump_thread () at /data/src/10.4-bug/storage/innobase/buf/buf0dump.cc:832
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 23 (Thread 0x7f57531a5840 (LWP 3861636)):
      #0  0x00007f575340daff in __GI___poll (fds=0x7ffe69323b90, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
      #1  0x00007f5753e225ba in poll () from /lib/x86_64-linux-gnu/libasan.so.5
      #2  0x000055f07e878ef3 in handle_connections_sockets () at /data/src/10.4-bug/sql/mysqld.cc:6463
      #3  0x000055f07e8771d9 in mysqld_main (argc=<error reading variable: Cannot access memory at address 0x3d60>, argv=<error reading variable: Cannot access memory at address 0x3d70>) at /data/src/10.4-bug/sql/mysqld.cc:5899
      #4  0x000055f07e85de2d in main (argc=23, argv=0x7ffe69323fd8) at /data/src/10.4-bug/sql/main.cc:25
       
      Thread 22 (Thread 0x7f573e6cb700 (LWP 3861660)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x7f573e6cac38) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x7f573e6cac98, cond=0x7f573e6cac10) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x7f573e6cac10, mutex=0x7f573e6cac98) at pthread_cond_wait.c:638
      #3  0x000055f080752213 in safe_cond_wait (cond=0x7f573e6cac10, mp=0x7f573e6cac70, file=0x55f080f6b080 "/data/src/10.4-bug/include/mysql/psi/mysql_thread.h", line=1185) at /data/src/10.4-bug/mysys/thr_mutex.c:492
      #4  0x000055f07fcb7a6e in inline_mysql_cond_wait (that=0x7f573e6cac10, mutex=0x7f573e6cac70, src_file=0x55f080f72d40 "/data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc", src_line=310) at /data/src/10.4-bug/include/mysql/psi/mysql_thread.h:1185
      #5  0x000055f07fcc0adc in thd_destructor_proxy () at /data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc:310
      #6  0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x61600000aef0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 21 (Thread 0x7f573cba7300 (LWP 3861662)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55f08220a708 <COND_manager+40>) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55f08220a628 <LOCK_manager+40>, cond=0x55f08220a6e0 <COND_manager>) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x55f08220a6e0 <COND_manager>, mutex=0x55f08220a628 <LOCK_manager+40>) at pthread_cond_wait.c:638
      #3  0x000055f080752213 in safe_cond_wait (cond=0x55f08220a6e0 <COND_manager>, mp=0x55f08220a600 <LOCK_manager>, file=0x55f0809cdbe0 "/data/src/10.4-bug/include/mysql/psi/mysql_thread.h", line=1174) at /data/src/10.4-bug/mysys/thr_mutex.c:492
      #4  0x000055f07eb4edd0 in inline_mysql_cond_wait (that=0x55f08220a6e0 <COND_manager>, mutex=0x55f08220a600 <LOCK_manager>, src_file=0x55f0809ce620 "/data/src/10.4-bug/sql/sql_manager.cc", src_line=102) at /data/src/10.4-bug/include/mysql/psi/mysql_thread.h:1174
      #5  0x000055f07eb4f8b6 in handle_manager (arg=0x0) at /data/src/10.4-bug/sql/sql_manager.cc:102
      #6  0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x61600000e7f0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 20 (Thread 0x7f5748b2b300 (LWP 3861661)):
      #0  0x00007f575333f322 in __GI___sigtimedwait (set=0x7f5748b2a8b0, info=0x7f5748b2a6e0, timeout=0x0) at ../sysdeps/unix/sysv/linux/sigtimedwait.c:29
      #1  0x00007f5753e6d111 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #2  0x000055f07e85df29 in my_sigwait (set=0x7f5748b2a8b0, sig=0x7f5748b2a820, code=0x7f5748b2a830) at /data/src/10.4-bug/include/my_pthread.h:196
      #3  0x000055f07e86dc6a in signal_hand (arg=0x0) at /data/src/10.4-bug/sql/mysqld.cc:3219
      #4  0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x61600000cff0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #5  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #6  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 19 (Thread 0x7f574596f700 (LWP 3861645)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f574596e470, clockid=<optimized out>, expected=0, futex_word=0x60b0000016ac) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f574596e470, clockid=<optimized out>, mutex=0x60b000001658, cond=0x60b000001680) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x60b000001680, mutex=0x60b000001658, abstime=0x7f574596e470) at pthread_cond_wait.c:656
      #3  0x000055f07ff1443b in os_event::timed_wait (this=0x60b000001640, abstime=0x7f574596e470) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:275
      #4  0x000055f07ff14b41 in os_event::wait_time_low (this=0x60b000001640, time_in_usec=1000000, reset_sig_count=2) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:385
      #5  0x000055f07ff14dc3 in os_event_wait_time_low (event=0x60b000001640, time_in_usec=1000000, reset_sig_count=2) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:485
      #6  0x000055f080340b61 in pc_sleep_if_needed (next_loop_time=265468129, sig_count=2, cur_time=265467129) at /data/src/10.4-bug/storage/innobase/buf/buf0flu.cc:2637
      #7  0x000055f08034390e in buf_flush_page_cleaner_coordinator () at /data/src/10.4-bug/storage/innobase/buf/buf0flu.cc:3096
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 18 (Thread 0x7f573eecc700 (LWP 3861659)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x60b000001758) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x60b000001708, cond=0x60b000001730) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x60b000001730, mutex=0x60b000001708) at pthread_cond_wait.c:638
      #3  0x000055f07ff1515c in os_event::wait (this=0x60b0000016f0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:158
      #4  0x000055f07ff14821 in os_event::wait_low (this=0x60b0000016f0, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:325
      #5  0x000055f07ff14dec in os_event_wait_low (event=0x60b0000016f0, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:502
      #6  0x000055f0802f6b64 in buf_resize_thread () at /data/src/10.4-bug/storage/innobase/buf/buf0buf.cc:3142
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 17 (Thread 0x7f5741ed2700 (LWP 3861653)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x60b0000011dc) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x60b000001188, cond=0x60b0000011b0) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x60b0000011b0, mutex=0x60b000001188) at pthread_cond_wait.c:638
      #3  0x000055f07ff1515c in os_event::wait (this=0x60b000001170) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:158
      #4  0x000055f07ff14821 in os_event::wait_low (this=0x60b000001170, reset_sig_count=4) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:325
      #5  0x000055f07ff14dec in os_event_wait_low (event=0x60b000001170, reset_sig_count=4) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:502
      #6  0x000055f080133fb0 in srv_resume_thread (slot=0x55f081e46608 <srv_sys+584>, sig_count=4, wait=true, timeout_usec=0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:904
      #7  0x000055f08013b174 in srv_purge_coordinator_suspend (slot=0x55f081e46608 <srv_sys+584>, rseg_history_len=18) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2660
      #8  0x000055f08013b847 in srv_purge_coordinator_thread (arg=0x0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2743
      #9  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #10 0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 16 (Thread 0x7f57436d5700 (LWP 3861650)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f57436d4d40, clockid=<optimized out>, expected=0, futex_word=0x60b000071d28) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f57436d4d40, clockid=<optimized out>, mutex=0x60b000071cd8, cond=0x60b000071d00) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x60b000071d00, mutex=0x60b000071cd8, abstime=0x7f57436d4d40) at pthread_cond_wait.c:656
      #3  0x000055f07ff1443b in os_event::timed_wait (this=0x60b000071cc0, abstime=0x7f57436d4d40) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:275
      #4  0x000055f07ff14b41 in os_event::wait_time_low (this=0x60b000071cc0, time_in_usec=10000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:385
      #5  0x000055f07ff14dc3 in os_event_wait_time_low (event=0x60b000071cc0, time_in_usec=10000000, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:485
      #6  0x000055f0804156be in dict_stats_thread () at /data/src/10.4-bug/storage/innobase/dict/dict0stats_bg.cc:490
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 15 (Thread 0x7f5746196700 (LWP 3861644)):
      #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
      #1  0x00007f5753ca527b in ?? () from /lib/x86_64-linux-gnu/libaio.so.1
      #2  0x000055f07fef048d in LinuxAIOHandler::collect (this=0x7f57461959a0) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1823
      #3  0x000055f07fef14c2 in LinuxAIOHandler::poll (this=0x7f57461959a0, m1=0x7f5746195ae0, m2=0x7f5746195b00, request=0x7f5746195b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1984
      #4  0x000055f07fef19ef in os_aio_linux_handler (global_segment=5, m1=0x7f5746195ae0, m2=0x7f5746195b00, request=0x7f5746195b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:2038
      #5  0x000055f07fefd3e7 in os_aio_handler (segment=5, m1=0x7f5746195ae0, m2=0x7f5746195b00, request=0x7f5746195b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:5366
      #6  0x000055f080443ded in fil_aio_wait (segment=5) at /data/src/10.4-bug/storage/innobase/fil/fil0fil.cc:4315
      #7  0x000055f08013f445 in io_handler_thread (arg=0x55f082ad7be8 <n+40>) at /data/src/10.4-bug/storage/innobase/srv/srv0start.cc:324
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 14 (Thread 0x7f57446d7700 (LWP 3861647)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f57446d6d20, clockid=<optimized out>, expected=0, futex_word=0x60b0000714e8) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f57446d6d20, clockid=<optimized out>, mutex=0x60b000071498, cond=0x60b0000714c0) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x60b0000714c0, mutex=0x60b000071498, abstime=0x7f57446d6d20) at pthread_cond_wait.c:656
      #3  0x000055f07ff1443b in os_event::timed_wait (this=0x60b000071480, abstime=0x7f57446d6d20) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:275
      #4  0x000055f07ff14b41 in os_event::wait_time_low (this=0x60b000071480, time_in_usec=1000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:385
      #5  0x000055f07ff14dc3 in os_event_wait_time_low (event=0x60b000071480, time_in_usec=1000000, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:485
      #6  0x000055f07fe8e084 in lock_wait_timeout_thread () at /data/src/10.4-bug/storage/innobase/lock/lock0wait.cc:514
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 13 (Thread 0x7f57469ad700 (LWP 3861643)):
      #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
      #1  0x00007f5753ca527b in ?? () from /lib/x86_64-linux-gnu/libaio.so.1
      #2  0x000055f07fef048d in LinuxAIOHandler::collect (this=0x7f57469ac9a0) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1823
      #3  0x000055f07fef14c2 in LinuxAIOHandler::poll (this=0x7f57469ac9a0, m1=0x7f57469acae0, m2=0x7f57469acb00, request=0x7f57469acb40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1984
      #4  0x000055f07fef19ef in os_aio_linux_handler (global_segment=4, m1=0x7f57469acae0, m2=0x7f57469acb00, request=0x7f57469acb40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:2038
      #5  0x000055f07fefd3e7 in os_aio_handler (segment=4, m1=0x7f57469acae0, m2=0x7f57469acb00, request=0x7f57469acb40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:5366
      #6  0x000055f080443ded in fil_aio_wait (segment=4) at /data/src/10.4-bug/storage/innobase/fil/fil0fil.cc:4315
      #7  0x000055f08013f445 in io_handler_thread (arg=0x55f082ad7be0 <n+32>) at /data/src/10.4-bug/storage/innobase/srv/srv0start.cc:324
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 12 (Thread 0x7f573f6cd700 (LWP 3861658)):
      #0  0x00007f57533d83bf in __GI___clock_nanosleep (clock_id=clock_id@entry=0, flags=flags@entry=0, req=0x7f573f6cc3c0, rem=0x0) at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:78
      #1  0x00007f57533de047 in __GI___nanosleep (requested_time=<optimized out>, remaining=<optimized out>) at nanosleep.c:27
      #2  0x000055f07ff15865 in os_thread_sleep (tm=1000000) at /data/src/10.4-bug/storage/innobase/os/os0thread.cc:231
      #3  0x000055f0802d51fa in btr_defragment_thread () at /data/src/10.4-bug/storage/innobase/btr/btr0defragment.cc:705
      #4  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #5  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 11 (Thread 0x7f5742ed4700 (LWP 3861651)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f5742ed3a90, clockid=<optimized out>, expected=0, futex_word=0x60b000079628) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f5742ed3a90, clockid=<optimized out>, mutex=0x60b0000795d8, cond=0x60b000079600) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x60b000079600, mutex=0x60b0000795d8, abstime=0x7f5742ed3a90) at pthread_cond_wait.c:656
      #3  0x000055f07ff1443b in os_event::timed_wait (this=0x60b0000795c0, abstime=0x7f5742ed3a90) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:275
      #4  0x000055f07ff14b41 in os_event::wait_time_low (this=0x60b0000795c0, time_in_usec=5000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:385
      #5  0x000055f07ff14dc3 in os_event_wait_time_low (event=0x60b0000795c0, time_in_usec=5000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:485
      #6  0x000055f08021a172 in ib_wqueue_timedwait (wq=0x60f0000007c0, wait_in_usecs=5000000) at /data/src/10.4-bug/storage/innobase/ut/ut0wqueue.cc:158
      #7  0x000055f0804e520f in fts_optimize_thread (arg=0x60f0000007c0) at /data/src/10.4-bug/storage/innobase/fts/fts0opt.cc:2833
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 10 (Thread 0x7f57406cf700 (LWP 3861656)):
      #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x60b0000013ec) at ../sysdeps/nptl/futex-internal.h:183
      #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x60b000001398, cond=0x60b0000013c0) at pthread_cond_wait.c:508
      #2  __pthread_cond_wait (cond=0x60b0000013c0, mutex=0x60b000001398) at pthread_cond_wait.c:638
      #3  0x000055f07ff1515c in os_event::wait (this=0x60b000001380) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:158
      #4  0x000055f07ff14821 in os_event::wait_low (this=0x60b000001380, reset_sig_count=14) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:325
      #5  0x000055f07ff14dec in os_event_wait_low (event=0x60b000001380, reset_sig_count=0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:502
      #6  0x000055f080133fb0 in srv_resume_thread (slot=0x55f081e468f0 <srv_sys+1328>, sig_count=0, wait=true, timeout_usec=0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:904
      #7  0x000055f08013ab83 in srv_worker_thread (arg=0x0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2518
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 9 (Thread 0x7f57426d3700 (LWP 3861652)):
      #0  0x00007f57533d83bf in __GI___clock_nanosleep (clock_id=clock_id@entry=0, flags=flags@entry=0, req=0x7f57426d2cb0, rem=0x0) at ../sysdeps/unix/sysv/linux/clock_nanosleep.c:78
      #1  0x00007f57533de047 in __GI___nanosleep (requested_time=<optimized out>, remaining=<optimized out>) at nanosleep.c:27
      #2  0x000055f07ff15865 in os_thread_sleep (tm=1000000) at /data/src/10.4-bug/storage/innobase/os/os0thread.cc:231
      #3  0x000055f080139a77 in srv_master_sleep () at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2335
      #4  0x000055f080139d8f in srv_master_thread (arg=0x0) at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:2375
      #5  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #6  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 8 (Thread 0x7f5743ed6700 (LWP 3861648)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f5743ed58c0, clockid=<optimized out>, expected=0, futex_word=0x60b000001498) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f5743ed58c0, clockid=<optimized out>, mutex=0x60b000001448, cond=0x60b000001470) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x60b000001470, mutex=0x60b000001448, abstime=0x7f5743ed58c0) at pthread_cond_wait.c:656
      #3  0x000055f07ff1443b in os_event::timed_wait (this=0x60b000001430, abstime=0x7f5743ed58c0) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:275
      #4  0x000055f07ff14b41 in os_event::wait_time_low (this=0x60b000001430, time_in_usec=1000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:385
      #5  0x000055f07ff14dc3 in os_event_wait_time_low (event=0x60b000001430, time_in_usec=1000000, reset_sig_count=1) at /data/src/10.4-bug/storage/innobase/os/os0event.cc:485
      #6  0x000055f080137b27 in srv_error_monitor_thread () at /data/src/10.4-bug/storage/innobase/srv/srv0srv.cc:1848
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 7 (Thread 0x7f5748a09700 (LWP 3861639)):
      #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
      #1  0x00007f5753ca527b in ?? () from /lib/x86_64-linux-gnu/libaio.so.1
      #2  0x000055f07fef048d in LinuxAIOHandler::collect (this=0x7f5748a089a0) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1823
      #3  0x000055f07fef14c2 in LinuxAIOHandler::poll (this=0x7f5748a089a0, m1=0x7f5748a08ae0, m2=0x7f5748a08b00, request=0x7f5748a08b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1984
      #4  0x000055f07fef19ef in os_aio_linux_handler (global_segment=0, m1=0x7f5748a08ae0, m2=0x7f5748a08b00, request=0x7f5748a08b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:2038
      #5  0x000055f07fefd3e7 in os_aio_handler (segment=0, m1=0x7f5748a08ae0, m2=0x7f5748a08b00, request=0x7f5748a08b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:5366
      #6  0x000055f080443ded in fil_aio_wait (segment=0) at /data/src/10.4-bug/storage/innobase/fil/fil0fil.cc:4315
      #7  0x000055f08013f445 in io_handler_thread (arg=0x55f082ad7bc0 <n>) at /data/src/10.4-bug/storage/innobase/srv/srv0start.cc:324
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 6 (Thread 0x7f574a36f700 (LWP 3861638)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f574a36ec00, clockid=<optimized out>, expected=0, futex_word=0x55f082a64ee8 <COND_checkpoint+40>) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f574a36ec00, clockid=<optimized out>, mutex=0x55f082a64e08 <LOCK_checkpoint+40>, cond=0x55f082a64ec0 <COND_checkpoint>) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x55f082a64ec0 <COND_checkpoint>, mutex=0x55f082a64e08 <LOCK_checkpoint+40>, abstime=0x7f574a36ec00) at pthread_cond_wait.c:656
      #3  0x000055f080752b4c in safe_cond_timedwait (cond=0x55f082a64ec0 <COND_checkpoint>, mp=0x55f082a64de0 <LOCK_checkpoint>, abstime=0x7f574a36ec00, file=0x55f080e7ce20 "/data/src/10.4-bug/include/mysql/psi/mysql_thread.h", line=1211) at /data/src/10.4-bug/mysys/thr_mutex.c:546
      #4  0x000055f07f96d627 in inline_mysql_cond_timedwait (that=0x55f082a64ec0 <COND_checkpoint>, mutex=0x55f082a64de0 <LOCK_checkpoint>, abstime=0x7f574a36ec00, src_file=0x55f080e7cea0 "/data/src/10.4-bug/storage/maria/ma_servicethread.c", src_line=115) at /data/src/10.4-bug/include/mysql/psi/mysql_thread.h:1211
      #5  0x000055f07f96e502 in my_service_thread_sleep (control=0x55f081c519a0 <checkpoint_control>, sleep_time=29000000000) at /data/src/10.4-bug/storage/maria/ma_servicethread.c:115
      #6  0x000055f07f94ffe6 in ma_checkpoint_background (arg=0x1e) at /data/src/10.4-bug/storage/maria/ma_checkpoint.c:707
      #7  0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x6160000066f0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 5 (Thread 0x7f57471c4700 (LWP 3861642)):
      #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
      #1  0x00007f5753ca527b in ?? () from /lib/x86_64-linux-gnu/libaio.so.1
      #2  0x000055f07fef048d in LinuxAIOHandler::collect (this=0x7f57471c39a0) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1823
      #3  0x000055f07fef14c2 in LinuxAIOHandler::poll (this=0x7f57471c39a0, m1=0x7f57471c3ae0, m2=0x7f57471c3b00, request=0x7f57471c3b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1984
      #4  0x000055f07fef19ef in os_aio_linux_handler (global_segment=3, m1=0x7f57471c3ae0, m2=0x7f57471c3b00, request=0x7f57471c3b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:2038
      #5  0x000055f07fefd3e7 in os_aio_handler (segment=3, m1=0x7f57471c3ae0, m2=0x7f57471c3b00, request=0x7f57471c3b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:5366
      #6  0x000055f080443ded in fil_aio_wait (segment=3) at /data/src/10.4-bug/storage/innobase/fil/fil0fil.cc:4315
      #7  0x000055f08013f445 in io_handler_thread (arg=0x55f082ad7bd8 <n+24>) at /data/src/10.4-bug/storage/innobase/srv/srv0start.cc:324
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 4 (Thread 0x7f57481f2700 (LWP 3861640)):
      #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
      #1  0x00007f5753ca527b in ?? () from /lib/x86_64-linux-gnu/libaio.so.1
      #2  0x000055f07fef048d in LinuxAIOHandler::collect (this=0x7f57481f19a0) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1823
      #3  0x000055f07fef14c2 in LinuxAIOHandler::poll (this=0x7f57481f19a0, m1=0x7f57481f1ae0, m2=0x7f57481f1b00, request=0x7f57481f1b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1984
      #4  0x000055f07fef19ef in os_aio_linux_handler (global_segment=1, m1=0x7f57481f1ae0, m2=0x7f57481f1b00, request=0x7f57481f1b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:2038
      #5  0x000055f07fefd3e7 in os_aio_handler (segment=1, m1=0x7f57481f1ae0, m2=0x7f57481f1b00, request=0x7f57481f1b40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:5366
      #6  0x000055f080443ded in fil_aio_wait (segment=1) at /data/src/10.4-bug/storage/innobase/fil/fil0fil.cc:4315
      #7  0x000055f08013f445 in io_handler_thread (arg=0x55f082ad7bc8 <n+8>) at /data/src/10.4-bug/storage/innobase/srv/srv0start.cc:324
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 3 (Thread 0x7f57479db700 (LWP 3861641)):
      #0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
      #1  0x00007f5753ca527b in ?? () from /lib/x86_64-linux-gnu/libaio.so.1
      #2  0x000055f07fef048d in LinuxAIOHandler::collect (this=0x7f57479da9a0) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1823
      #3  0x000055f07fef14c2 in LinuxAIOHandler::poll (this=0x7f57479da9a0, m1=0x7f57479daae0, m2=0x7f57479dab00, request=0x7f57479dab40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:1984
      #4  0x000055f07fef19ef in os_aio_linux_handler (global_segment=2, m1=0x7f57479daae0, m2=0x7f57479dab00, request=0x7f57479dab40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:2038
      #5  0x000055f07fefd3e7 in os_aio_handler (segment=2, m1=0x7f57479daae0, m2=0x7f57479dab00, request=0x7f57479dab40) at /data/src/10.4-bug/storage/innobase/os/os0file.cc:5366
      #6  0x000055f080443ded in fil_aio_wait (segment=2) at /data/src/10.4-bug/storage/innobase/fil/fil0fil.cc:4315
      #7  0x000055f08013f445 in io_handler_thread (arg=0x55f082ad7bd0 <n+16>) at /data/src/10.4-bug/storage/innobase/srv/srv0start.cc:324
      #8  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #9  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 2 (Thread 0x7f574ba97700 (LWP 3861637)):
      #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7f574ba96d50, clockid=<optimized out>, expected=0, futex_word=0x55f082afe028 <COND_timer+40>) at ../sysdeps/nptl/futex-internal.h:320
      #1  __pthread_cond_wait_common (abstime=0x7f574ba96d50, clockid=<optimized out>, mutex=0x55f082afdf48 <LOCK_timer+40>, cond=0x55f082afe000 <COND_timer>) at pthread_cond_wait.c:520
      #2  __pthread_cond_timedwait (cond=0x55f082afe000 <COND_timer>, mutex=0x55f082afdf48 <LOCK_timer+40>, abstime=0x7f574ba96d50) at pthread_cond_wait.c:656
      #3  0x000055f080752b4c in safe_cond_timedwait (cond=0x55f082afe000 <COND_timer>, mp=0x55f082afdf20 <LOCK_timer>, abstime=0x7f574ba96d50, file=0x55f081373120 "/data/src/10.4-bug/include/mysql/psi/mysql_thread.h", line=1211) at /data/src/10.4-bug/mysys/thr_mutex.c:546
      #4  0x000055f080755999 in inline_mysql_cond_timedwait (that=0x55f082afe000 <COND_timer>, mutex=0x55f082afdf20 <LOCK_timer>, abstime=0x7f574ba96d50, src_file=0x55f0813731c0 "/data/src/10.4-bug/mysys/thr_timer.c", src_line=292) at /data/src/10.4-bug/include/mysql/psi/mysql_thread.h:1211
      #5  0x000055f08075791d in timer_handler (arg=0x0) at /data/src/10.4-bug/mysys/thr_timer.c:292
      #6  0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x616000001ef0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #7  0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #8  0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
       
      Thread 1 (Thread 0x7f573cb2f300 (LWP 3861665)):
      #0  __pthread_kill (threadid=<optimized out>, signo=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56
      #1  0x000055f080744747 in my_write_core (sig=6) at /data/src/10.4-bug/mysys/stacktrace.c:386
      #2  0x000055f07f307632 in handle_fatal_signal (sig=6) at /data/src/10.4-bug/sql/signal_handler.cc:356
      #3  <signal handler called>
      #4  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
      #5  0x00007f575331d859 in __GI_abort () at abort.c:79
      #6  0x00007f5753f116a2 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #7  0x00007f5753f1c24c in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #8  0x00007f5753efd8ec in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #9  0x00007f5753efd363 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #10 0x00007f5753e8149f in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
      #11 0x000055f07ffb147a in rec_convert_dtuple_to_rec_comp<>(rec_t *, const dict_index_t *, const dfield_t *, ulint, rec_comp_status_t, bool) (rec=0x611000064350 "", index=0x617000048408, field=0x616000056bb8, n_fields=6, status=REC_STATUS_ORDINARY, temp=false) at /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1709
      #12 0x000055f07ff9e2d3 in rec_convert_dtuple_to_rec_new (buf=0x611000064350 "", index=0x617000048408, dtuple=0x616000056b08) at /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1755
      #13 0x000055f07ff9e63b in rec_convert_dtuple_to_rec (buf=0x611000064348 "\003\003", index=0x617000048408, dtuple=0x616000056b08, n_ext=0) at /data/src/10.4-bug/storage/innobase/rem/rem0rec.cc:1787
      #14 0x000055f0802679a7 in page_cur_tuple_insert (cursor=0x7f573cb29618, tuple=0x616000056b08, index=0x617000048408, offsets=0x7f573cb29590, heap=0x7f573cb29570, n_ext=0, mtr=0x7f573cb29a20) at /data/src/10.4-bug/storage/innobase/include/page0cur.ic:272
      #15 0x000055f08028056e in btr_cur_optimistic_insert (flags=0, cursor=0x7f573cb29610, offsets=0x7f573cb29590, heap=0x7f573cb29570, entry=0x616000056b08, rec=0x7f573cb295b0, big_rec=0x7f573cb29550, n_ext=0, thr=0x6210000bd880, mtr=0x7f573cb29a20) at /data/src/10.4-bug/storage/innobase/btr/btr0cur.cc:3609
      #16 0x000055f08000814c in row_ins_clust_index_entry_low (flags=0, mode=2, index=0x617000048408, n_uniq=0, entry=0x616000056b08, n_ext=0, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:2741
      #17 0x000055f08000ac69 in row_ins_clust_index_entry (index=0x617000048408, entry=0x616000056b08, thr=0x6210000bd880, n_ext=0) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3216
      #18 0x000055f08000b6ec in row_ins_index_entry (index=0x617000048408, entry=0x616000056b08, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3342
      #19 0x000055f08000c859 in row_ins_index_entry_step (node=0x6210000bd5d0, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3511
      #20 0x000055f08000d332 in row_ins (node=0x6210000bd5d0, thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3670
      #21 0x000055f08000e5ea in row_ins_step (thr=0x6210000bd880) at /data/src/10.4-bug/storage/innobase/row/row0ins.cc:3820
      #22 0x000055f080057f36 in row_insert_for_mysql (mysql_rec=0x6190000f1020 "\360foo     \003", prebuilt=0x6210000bcd88, ins_mode=ROW_INS_NORMAL) at /data/src/10.4-bug/storage/innobase/row/row0mysql.cc:1401
      #23 0x000055f07fce2610 in ha_innobase::write_row (this=0x61d000249110, record=0x6190000f1020 "\360foo     \003") at /data/src/10.4-bug/storage/innobase/handler/ha_innodb.cc:8112
      #24 0x000055f07f3400c6 in handler::ha_write_row (this=0x61d000249110, buf=0x6190000f1020 "\360foo     \003") at /data/src/10.4-bug/sql/handler.cc:6771
      #25 0x000055f07eab71ef in write_record (thd=0x62b00009a270, table=0x62000003d0f0, info=0x7f573cb2b440) at /data/src/10.4-bug/sql/sql_insert.cc:1747
      #26 0x000055f07eb45a07 in read_sep_field (thd=0x62b00009a270, info=..., table_list=0x62b0000a1430, fields_vars=..., set_fields=..., set_values=..., read_info=..., enclosed=..., skip_lines=0, ignore_check_option_errors=false) at /data/src/10.4-bug/sql/sql_load.cc:1164
      #27 0x000055f07eb41bbd in mysql_load (thd=0x62b00009a270, ex=0x62b0000a1388, table_list=0x62b0000a1430, fields_vars=..., set_fields=..., set_values=..., handle_duplicates=DUP_REPLACE, ignore=false, read_file_from_client=false) at /data/src/10.4-bug/sql/sql_load.cc:669
      #28 0x000055f07eb72a38 in mysql_execute_command (thd=0x62b00009a270) at /data/src/10.4-bug/sql/sql_parse.cc:5008
      #29 0x000055f07eb86f05 in mysql_parse (thd=0x62b00009a270, rawbuf=0x62b0000a1290 "LOAD DATA INFILE 't1.data' REPLACE INTO TABLE t1", length=48, parser_state=0x7f573cb2d780, is_com_multi=false, is_next_command=false) at /data/src/10.4-bug/sql/sql_parse.cc:7995
      #30 0x000055f07eb5d68c in dispatch_command (command=COM_QUERY, thd=0x62b00009a270, packet=0x629000299271 "LOAD DATA INFILE 't1.data' REPLACE INTO TABLE t1", packet_length=48, is_com_multi=false, is_next_command=false) at /data/src/10.4-bug/sql/sql_parse.cc:1857
      #31 0x000055f07eb5a109 in do_command (thd=0x62b00009a270) at /data/src/10.4-bug/sql/sql_parse.cc:1373
      #32 0x000055f07ef54a2d in do_handle_one_connection (connect=0x6110000434f0) at /data/src/10.4-bug/sql/sql_connect.cc:1420
      #33 0x000055f07ef54186 in handle_one_connection (arg=0x6110000434f0) at /data/src/10.4-bug/sql/sql_connect.cc:1316
      #34 0x000055f07fbd7e75 in pfs_spawn_thread (arg=0x61600003fff0) at /data/src/10.4-bug/storage/perfschema/pfs.cc:1869
      #35 0x00007f5753847609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #36 0x00007f575341a293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
      

      Reproducible on 10.4-10.7.

      Attachments

        Issue Links

          Activity

            People

              nikitamalyavin Nikita Malyavin
              elenst Elena Stepanova
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.