Segfault (signal 11) in MariaDB 11.8.2 when querying information_schema.COLUMNS with JOIN on generated columns

SELECT

    c.TABLE_NAME,

    c.COLUMN_NAME

FROM

    information_schema.COLUMNS c

INNER JOIN 

    exampledb.exampletable s 

ON

    s.table_name = c.TABLE_NAME 

WHERE

    c.TABLE_SCHEMA = 'exampletable'

AND

    c.IS_GENERATED != 'NEVER';

250630 13:37:01 [ERROR] /usr/sbin/mariadbd got signal 11 ;

Sorry, we probably made a mistake, and this is a bug.

Your assistance in bug reporting will enable us to fix this for the next release.

To report this bug, see https://mariadb.com/kb/en/reporting-bugs about how to report

a bug on https://jira.mariadb.org/.

Please include the information from the server start above, to the end of the

information below.

Server version: 11.8.2-MariaDB-deb12 source revision: 8d36cafe4fc700e6e577d5a36650c58707e76b92

The information page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mariadbd/

contains instructions to obtain a better version of the backtrace below.

Following these instructions will help MariaDB developers provide a fix quicker.

Attempting backtrace. Include this in the bug report.

(note: Retrieving this information may fail)

Thread pointer: 0x7f3440000c68

stack_bottom = 0x7f34a02e0000 thread_stack 0x49000

2025-06-30 13:37:01 0 [Note] /usr/sbin/mariadbd (initiated by: unknown): Normal shutdown

/usr/sbin/mariadbd(my_print_stacktrace+0x2e)[0x555a25e5748e]

/usr/sbin/mariadbd(handle_fatal_signal+0x1a3)[0x555a2592c8d3]

/lib/x86_64-linux-gnu/libc.so.6(+0x3c050)[0x7f350305b050]

/usr/sbin/mariadbd(_ZN4Item19print_parenthesisedEP6String15enum_query_type10precedence+0x1d)[0x555a2594d96d]

/usr/sbin/mariadbd(+0x922724)[0x555a2572c724]

/usr/sbin/mariadbd(+0x931bdb)[0x555a2573bbdb]

/usr/sbin/mariadbd(_Z14get_all_tablesP3THDP10TABLE_LISTP4Item+0x134c)[0x555a257445cc]

/usr/sbin/mariadbd(_Z24get_schema_tables_resultP4JOIN23enum_schema_table_state+0x287)[0x555a25745487]

/usr/sbin/mariadbd(_ZN4JOIN10exec_innerEv+0xabd)[0x555a2572601d]

/usr/sbin/mariadbd(_ZN4JOIN4execEv+0x35)[0x555a25726915]

/usr/sbin/mariadbd(_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x124)[0x555a25724934]

/usr/sbin/mariadbd(_Z13handle_selectP3THDP3LEXP13select_resulty+0x154)[0x555a25725114]

/usr/sbin/mariadbd(+0x88aeb0)[0x555a25694eb0]

/usr/sbin/mariadbd(_Z21mysql_execute_commandP3THDb+0x3f8b)[0x555a256a453b]

/usr/sbin/mariadbd(_Z11mysql_parseP3THDPcjP12Parser_state+0x1c6)[0x555a256a5b26]

/usr/sbin/mariadbd(_Z16dispatch_command19enum_server_commandP3THDPcjb+0x14bd)[0x555a256a7fed]

/usr/sbin/mariadbd(_Z10do_commandP3THDb+0x13f)[0x555a256a9cdf]

/usr/sbin/mariadbd(_Z24do_handle_one_connectionP7CONNECTb+0x385)[0x555a257dd2d5]

/usr/sbin/mariadbd(handle_one_connection+0x65)[0x555a257dd635]

/usr/sbin/mariadbd(+0xd651ec)[0x555a25b6f1ec]

/lib/x86_64-linux-gnu/libc.so.6(+0x891f5)[0x7f35030a81f5]

/lib/x86_64-linux-gnu/libc.so.6(+0x10989c)[0x7f350312889c]

Connection ID (thread ID): 1446

Status: KILL_SERVER

Query (0x7f3440012fa0): SELECT

						c.TABLE_NAME,

						c.COLUMN_NAME

					FROM

						information_schema.COLUMNS c

					INNER JOIN 

						exampledb.exampletable s 

					ON

						s.table_name = c.TABLE_NAME 

					WHERE

						c.TABLE_SCHEMA = 'exampledb'

					AND

						c.IS_GENERATED != 'NEVER'

Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on,not_null_range_scan=off,hash_join_cardinality=on,cset_narrowing=on,sargable_casefold=on

Writing a core file...

Working directory at /var/lib/mysql

Resource Limits (excludes unlimited resources):

Limit                     Soft Limit           Hard Limit           Units     

Max stack size            8388608              unlimited            bytes     

Max core file size        0                    unlimited            bytes     

Max processes             55747                55747                processes 

Max open files            32768                32768                files     

Max locked memory         524288               524288               bytes     

Max pending signals       55747                55747                signals   

Max msgqueue size         819200               819200               bytes     

Max nice priority         0                    0                    

Max realtime priority     0                    0                    

Core pattern: core

Kernel version: Linux version 6.1.0-37-amd64 (debian-kernel@lists.debian.org) (gcc-12 (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC Debian 6.1.140-1 (2025-05-22)

2025-06-30 13:37:07 0 [Note] Starting MariaDB 11.8.2-MariaDB-deb12 source revision 8d36cafe4fc700e6e577d5a36650c58707e76b92 server_uid vNmor6LEovZONhM78IPNxS8TDXw= as process 1162011

2025-06-30 13:37:07 0 [Note] CONNECT: Version 1.07.0002 March 22, 2021

2025-06-30 13:37:07 0 [Note] InnoDB: Compressed tables use zlib 1.2.13

2025-06-30 13:37:07 0 [Note] InnoDB: Number of transaction pools: 1

2025-06-30 13:37:07 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions

2025-06-30 13:37:07 0 [Note] InnoDB: Using liburing

2025-06-30 13:37:07 0 [Note] InnoDB: innodb_buffer_pool_size_max=1024m, innodb_buffer_pool_size=1024m

2025-06-30 13:37:07 0 [Note] InnoDB: Completed initialization of buffer pool

2025-06-30 13:37:07 0 [Note] InnoDB: File system buffers for log disabled (block size=512 bytes)

2025-06-30 13:37:07 0 [Note] InnoDB: Starting crash recovery from checkpoint LSN=68732294931

2025-06-30 13:37:07 0 [Note] InnoDB: End of log at LSN=68732513235

2025-06-30 13:37:07 0 [Note] InnoDB: To recover: 300 pages

2025-06-30 13:37:07 0 [Note] InnoDB: Opened 3 undo tablespaces

2025-06-30 13:37:07 0 [Note] InnoDB: 128 rollback segments in 3 undo tablespaces are active.

2025-06-30 13:37:07 0 [Note] InnoDB: Removed temporary tablespace data file: "./ibtmp1"

2025-06-30 13:37:07 0 [Note] InnoDB: Setting file './ibtmp1' size to 12.000MiB. Physically writing the file full; Please wait ...

2025-06-30 13:37:07 0 [Note] InnoDB: File './ibtmp1' size is now 12.000MiB.

2025-06-30 13:37:07 0 [Note] InnoDB: log sequence number 68732513235; transaction id 62569846

2025-06-30 13:37:07 0 [Note] InnoDB: Loading buffer pool(s) from /var/lib/mysql/ib_buffer_pool

2025-06-30 13:37:07 0 [Note] Plugin 'FEEDBACK' is disabled.

2025-06-30 13:37:07 0 [Note] Plugin 'wsrep-provider' is disabled.

2025-06-30 13:37:07 0 [Note] Recovering after a crash using tc.log

2025-06-30 13:37:07 0 [Note] Starting table crash recovery...

2025-06-30 13:37:07 0 [Note] Crash table recovery finished.

2025-06-30 13:37:07 0 [Note] InnoDB: Buffer pool(s) load completed at 250630 13:37:07

2025-06-30 13:37:08 0 [Note] Server socket created on IP: '0.0.0.0'.

2025-06-30 13:37:08 0 [Note] mariadbd: Event Scheduler: Loaded 3 events

2025-06-30 13:37:08 0 [Note] /usr/sbin/mariadbd: ready for connections.

Version: '11.8.2-MariaDB-deb12'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  mariadb.org binary distribution