SIGSEGV in std::_Rb_tree_insert_and_rebalance

Core was generated by `/test/MD070725-mariadb-10.11.14-linux-x86_64-opt/bin/mariadbd --no-defaults --m'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  std::_Rb_tree_insert_and_rebalance (__insert_left=<optimized out>, __x=0x72d354057490, __x@entry=0x72d3540617d0, __p=__p@entry=0x72d35402bc50, __header=...)at ../../../../../src/libstdc++-v3/src/c++98/tree.cc:282

[Current thread is 1 (LWP 947094)]

(gdb) bt

#0  std::_Rb_tree_insert_and_rebalance (__insert_left=<optimized out>, __x=0x72d354057490, __x@entry=0x72d3540617d0, __p=__p@entry=0x72d35402bc50, __header=@0x55779520cb48: {_M_color = std::_S_red, _M_parent = 0x0, _M_left = 0x557

79520cb48, _M_right = 0x55779520cb48})at ../../../../../src/libstdc++-v3/src/c++98/tree.cc:282

#1  0x000055776adbe42a in std::_Rb_tree<range_t, range_t, std::_Identity<range_t>, range_compare, std::allocator<range_t> >::_M_insert_node (this=0x55779520cb40, __x=0x0, __p=0x72d35402bc50, __z=0x72d3540617d0)at /usr/bin/../lib/g

cc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h:2385

#2  std::_Rb_tree<range_t, range_t, std::_Identity<range_t>, range_compare, std::allocator<range_t> >::_Auto_node::_M_insert (__p={  first = 0x0,  second = 0x72d35402bc50}, this=<optimized out>)at /usr/bin/../lib/gcc/x86_64-linux-

gnu/13/../../../../include/c++/13/bits/stl_tree.h:1657

#3  std::_Rb_tree<range_t, range_t, std::_Identity<range_t>, range_compare, std::allocator<range_t> >::_M_emplace_unique<range_t&> (this=0x55779520cb40, __args=<optimized out>)at /usr/bin/../lib/gcc/x86_64-linux-gnu/13/../../../..

/include/c++/13/bits/stl_tree.h:2437

#4  std::set<range_t, range_compare, std::allocator<range_t> >::emplace<range_t&> (this=0x55779520cb40, __args=<optimized out>)at /usr/bin/../lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_set.h:465

#5  range_set::add_range (this=0x55779520cb40, new_range={first = 151, last = 151}) at include/fil0fil.h:256

#6  0x000055776adc7093 in fil_space_t::add_free_range (range={first = 1409643664, last = 29395}, this=<optimized out>)at include/fil0fil.h:961

#7  mtr_t::commit (this=0x72d45c7d9bb0)at /test/10.11_opt/storage/innobase/mtr/mtr0mtr.cc:499

#8  0x000055776ae6ac8f in btr_drop_temporary_table (table=@0x72d354b42080: {id = 35, id_hash = 0x0, name = {m_name = 0x72d3543e7598 "tmp/#sql-temptable-e5d4d-8-194", static part_suffix = "#P#"}, name_hash = 0x0, heap = 0x72d354b6a

7e8, data_dir_path = 0x0, space = 0x55779520ca58, space_id = 4294967294, flags = 0, flags2 = 65, skip_alter_undo = 0, file_unreadable = 0, cached = 1, n_def = 6, n_cols = 6, n_t_cols = 6, n_t_def = 6, n_v_def = 0, n_v_cols = 0, pe

rsistent_autoinc = 0, can_be_evicted = 0, corrupted = 0, drop_aborted = 0, cols = 0x72d35493b010, v_cols = 0x72d35493b0d0, s_cols = 0x0, instant = 0x0, col_names = 0x72d35493b128 "c2", v_col_names = 0x0, vers_start = 0, vers_end =

 0, is_system_db = false, dict_frm_mismatch = DICT_FRM_CONSISTENT, fts_doc_id_index = 0x0, indexes = {count = 2, start = 0x72d35494ee10, end = 0x72d3543f6590, node = &dict_index_t::indexes}, freed_indexes = {count = 0, start = 0x0

, end = 0x0, node = &dict_index_t::indexes}, foreign_list = {count = 0, start = 0x0, end = 0x0, node = &dict_foreign_t::heap}, referenced_list = {count = 0, start = 0x0, end = 0x0, node = &dict_foreign_t::heap}, table_LRU = {prev 

= 0x72d355a1bc00, next = 0x557794fa23e0}, fk_max_recusive_level = 0 '\000', def_trx_id = 0, bulk_trx_id = {m = std::atomic<unsigned long> = { 0 }}, mdl_name = {m_name = 0x72d3543e7598 "tmp/#sql-temptable-e5d4d-8-194", static part_

suffix = <same as static member of an already seen type>}, foreign_set = std::set with 0 elements, referenced_set = std::set with 0 elements, stats_last_recalc = 0, static STATS_INITIALIZED = 1, static STATS_PERSISTENT_ON = 2, sta

tic STATS_PERSISTENT_OFF = 4, static STATS_AUTO_RECALC_ON = 8, static STATS_AUTO_RECALC_OFF = 16, stat = {m = std::atomic<unsigned int> = { 21 }}, stat_clustered_index_size = 1, stat_sum_of_other_index_sizes = 1, stats_sample_page

s = 1, stat_n_rows = 0, stat_modified_counter = 0, stats_error_printed = false, autoinc_lock = 0x72d35493b0d0, autoinc_mutex = {lock = std::atomic<unsigned int> = { 0 }, static HOLDER = 1, static WAITER = 2}, lock_latch = {writer 

= {lock = std::atomic<unsigned int> = { 0 }, static HOLDER = 1, static WAITER = 2}, readers = std::atomic<unsigned int> = { 0 }, static WRITER = 2147483648}, autoinc = 0, autoinc_trx = {m = std::atomic<const trx_t *> = { 0x0 }}, n

_waiting_or_granted_auto_inc_locks = 0, n_lock_x_or_s = 0, fts = 0x0, quiesce = QUIESCE_NONE, n_rec_locks = {m_counter = std::atomic<unsigned int> = { 0 }}, n_ref_count = {m_counter = std::atomic<unsigned int> = { 0 }}, locks = {c

ount = 0, start = 0x0, end = 0x0, node = &lock_table_t::locks}, update_time = {m = std::atomic<long> = { 0 }}, query_cache_inv_trx_id = {m = std::atomic<unsigned long> = { 0 }}, vc_templ = 0x0})at /test/10.11_opt/storage/innobase/

btr/btr0btr.cc:1295

#9  0x000055776ad66638 in ha_innobase::delete_table (this=<optimized out>, name=<optimized out>)at /test/10.11_opt/storage/innobase/handler/ha_innodb.cc:13577

#10 0x000055776aa980cc in hton_drop_table (hton=<optimized out>, path=0x72d354057490 "") at /test/10.11_opt/sql/handler.cc:575

#11 0x000055776aa1c5a0 in THD::rm_temporary_table (this=0x72d354000c68, base=0x557794e892c8, path=0x72d3550f7b00 "/dev/shm/281781/1301/tmp/#sql-temptable-e5d4d-8-194")at /test/10.11_opt/sql/temporary_tables.cc:707

#12 THD::log_events_and_free_tmp_shares (this=this@entry=0x72d354000c68)at /test/10.11_opt/sql/temporary_tables.cc:1402

#13 0x000055776aa1bf8f in THD::close_temporary_tables (this=0x72d354000c68)at /test/10.11_opt/sql/temporary_tables.cc:540

#14 0x000055776a7f701e in THD::cleanup (this=0x72d354000c68)at /test/10.11_opt/sql/sql_class.cc:1617

#15 0x000055776a75343e in unlink_thd (thd=0x0, thd@entry=0x72d354000c68)at /test/10.11_opt/sql/mysqld.cc:2844

#16 0x000055776a97044d in do_handle_one_connection (connect=<optimized out>, connect@entry=0x5577953d58f8, put_in_cache=true)at /test/10.11_opt/sql/sql_connect.cc:1397

#17 0x000055776a970193 in handle_one_connection (arg=arg@entry=0x5577953d58f8)at /test/10.11_opt/sql/sql_connect.cc:1298

#18 0x000055776accf4ae in pfs_spawn_thread (arg=0x557795378d98)at /test/10.11_opt/storage/perfschema/pfs.cc:2201

#19 0x000072d45f29caa4 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#20 0x000072d45f329c3c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78