(gdb) c Continuing. [New Thread 0x7ffff014a700 (LWP 305686)] [Thread 0x7fffbe7fc700 (LWP 305156) exited] [Thread 0x7fffbffff700 (LWP 305153) exited] Thread 13 "one_connection" received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7ffff014a700 (LWP 305686)] Item_subselect::init (this=0x7fffa4031d18, select_lex=0x7fffa4030740, result=0x7fffa4031f20) at /home/fuzzer/mariadb/sql/item_subselect--Type for more, q to quit, c to continue without paging-- .cc:124 124 parsing_place= (outer_select->in_sum_expr ? (gdb) bt #0 Item_subselect::init (this=0x7fffa4031d18, select_lex=0x7fffa4030740, result=0x7fffa4031f20) at /home/fuzzer/mariadb/sql/item_subselect.cc:124 #1 0x00005555567c676d in Item_in_subselect::Item_in_subselect (this=0x7fffa4031d18, thd= 0x7fffa4000db8, left_exp=, select_lex=0x7fffa4030740) at /home/fuzzer/mariadb/sql/item_subselect.cc:1664 #2 0x000055555650f268 in MYSQLparse (thd=0x7fffa4030740, thd@entry=0x7fffa4000db8) at /home/fuzzer/mariadb/sql/sql_yacc.yy:9777 #3 0x000055555603faa9 in parse_sql (thd=thd@entry=0x7fffa4000db8, parser_state=parser_state@entry=0x7ffff01493e0, creation_ctx=creation_ctx@entry=0x0, do_pfs_digest=true) at /home/fuzzer/mariadb/sql/sql_parse.cc:10327 #4 0x000055555601dbc1 in mysql_parse (thd=thd@entry=0x7fffa4000db8, rawbuf=0x7fffa402d090 "KILL 12345 NOT BETWEEN 1 AND 100 LIKE 'a%' AND 'b%' IN (SELECT v1 FROM t0) LIKE 'c%' SOUNDS LIKE 'd%' NOT REGEXP 'e%' SOUNDS LIKE 'f%' SOUNDS LIKE 'g%' SOUNDS LIKE 'h%' IN (SELECT v --Type for more, q to quit, c to continue without paging-- 2 FROM t1) IN ('x',"..., length=, parser_state=parser_state@entry=0x7ffff01493e0) at /home/fuzzer/mariadb/sql/sql_parse.cc:7867 #5 0x0000555556019500 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x7fffa4000db8, packet=packet@entry=0x7fffa400c599 "KILL 12345 NOT BETWEEN 1 AND 100 LIKE 'a%' AND 'b%' IN (SELECT v1 FROM t0) LIKE 'c%' SOUNDS LIKE 'd%' NOT REGEXP 'e%' SOUNDS LIKE 'f%' SOUNDS LIKE 'g%' SOUNDS LIKE 'h%' IN (SELECT v2 FROM t1) IN ('x',"..., packet_length=packet_length@entry=233, blocking=116) at /home/fuzzer/mariadb/sql/sql_parse.cc:1902 #6 0x000055555601ed03 in do_command (thd=thd@entry=0x7fffa4000db8, blocking=100) at /home/fuzzer/mariadb/sql/sql_parse.cc:1415 #7 0x00005555563177a4 in do_handle_one_connection (connect=, connect@entry=0x555559f4fe98, put_in_cache=252) at /home/fuzzer/mariadb/sql/sql_connect.cc:1415 #8 0x000055555631738d in handle_one_connection (arg=arg@entry=0x555559f4fe98) at /home/fuzzer/mariadb/sql/sql_connect.cc:1327 #9 0x0000555556b2433f in pfs_spawn_thread (arg=0x555559e8b818) at /home/fuzzer/mariadb/storage/perfschema/pfs.cc:2198 #10 0x00007ffff7a96609 in start_thread (arg=) at pthread_create.c:477 #11 0x00007ffff7720353 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95