Thread 13 "one_connection" received signal SIGABRT, Aborted. [Switching to Thread 0x7f5f9c067700 (LWP 23534)] __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 50 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #1 0x00007f5fa3740859 in __GI_abort () at abort.c:79 #2 0x00007f5fa3740729 in __assert_fail_base (fmt=0x7f5fa38d6588 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x55a2dfdc755c "0", file=0x55a2dfbc8444 "/home/fuzzer/mariadb/sql/item.h", line=1606, function=) at assert.c:94 #3 0x00007f5fa3751fd6 in __GI___assert_fail (assertion=0x55a2dfdc755c "0", file=0x55a2dfbc8444 "/home/fuzzer/mariadb/sql/item.h", line=1606, function=0x55a2dfbc8558 "virtual bool Item::val_native(THD *, Native *)") at assert.c:103 #4 0x000055a2de4ac8d9 in Item::val_native (this=0x7f5f500328b8, thd=, to=) at /home/fuzzer/mariadb/sql/item.h:1606 #5 0x000055a2de85f724 in Item::val_native_from_item (this=0x7f5f5002e3d0, thd=0x7f5f50000db8, item=0x7f5f500328b8, to=0x7f5f5002e698) at /home/fuzzer/mariadb/sql/item.h:981 #6 0x000055a2ded7606f in Item::val_native_with_conversion (this=0x0, thd=0x7f5f50000db8, to=0x7f5f5002e698, th=0x2) at /home/fuzzer/mariadb/sql/item.h:1565 #7 Arg_comparator::compare_native (this=0x7f5f5002e638) at /home/fuzzer/mariadb/sql/item_cmpfunc.cc:891 #8 0x000055a2ded7bee6 in Arg_comparator::compare (this=) at /home/fuzzer/mariadb/sql/item_cmpfunc.h:114 #9 Item_func_gt::val_bool (this=) at /home/fuzzer/mariadb/sql/item_cmpfunc.cc:1962 #10 0x000055a2de83c6b7 in JOIN::rollup_send_data (this=this@entry=0x7f5f5002f0f0, idx=idx@entry=0) at /home/fuzzer/mariadb/sql/sql_select.cc:30337 #11 0x000055a2de835d8d in end_send_group (join=0x7f5f5002f0f0, join_tab=, end_of_records=84) at /home/fuzzer/mariadb/sql/sql_select.cc:25701 #12 0x000055a2de7ac678 in sub_select (join=0x7f5f5002f0f0, join_tab=0x7f5f50030d90, end_of_records=true) at /home/fuzzer/mariadb/sql/sql_select.cc:24119 #13 0x000055a2de7f2164 in do_select (join=join@entry=0x7f5f5002f0f0, procedure=) at /home/fuzzer/mariadb/sql/sql_select.cc:23699 #14 0x000055a2de7f0a59 in JOIN::exec_inner (this=this@entry=0x7f5f5002f0f0) at /home/fuzzer/mariadb/sql/sql_select.cc:5059 #15 0x000055a2de7ef274 in JOIN::exec (this=this@entry=0x7f5f5002f0f0) at /home/fuzzer/mariadb/sql/sql_select.cc:4842 #16 0x000055a2de7ae007 in mysql_select (thd=thd@entry=0x7f5f50000db8, tables=0x7f5f5002d7f0, fields=..., conds=0x0, og_num=, order=0x0, group=, having=, proc_param=, select_options=, result=, unit=, select_lex=) at /home/fuzzer/mariadb/sql/sql_select.cc:5375 #17 0x000055a2de7ad718 in handle_select (thd=thd@entry=0x7f5f50000db8, lex=lex@entry=0x7f5f50005200, result=, result@entry=0x7f5f5002f0c8, setup_tables_done_option=setup_tables_done_option@entry=0) at /home/fuzzer/mariadb/sql/sql_select.cc:633 #18 0x000055a2de723c44 in execute_sqlcom_select (thd=thd@entry=0x7f5f50000db8, all_tables=0x7f5f5002d7f0) at /home/fuzzer/mariadb/sql/sql_parse.cc:6191 #19 0x000055a2de718bf2 in mysql_execute_command (thd=thd@entry=0x7f5f50000db8, is_called_from_prepared_stmt=20) at /home/fuzzer/mariadb/sql/sql_parse.cc:3979 #20 0x000055a2de708eb8 in mysql_parse (thd=thd@entry=0x7f5f50000db8, rawbuf=0x7f5f5002d090 "SELECT t2.v1 FROM t2 GROUP BY t2.v1 DESC, t2.v2, t2.v3 WITH ROLLUP HAVING t2.v2 > '2023-01-01'", length=, parser_state=parser_state@entry=0x7f5f9c0663e0) at /home/fuzzer/mariadb/sql/sql_parse.cc:7915 #21 0x000055a2de704500 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x7f5f50000db8, packet=packet@entry=0x7f5f5000c599 "", packet_length=packet_length@entry=94, blocking=116) at /home/fuzzer/mariadb/sql/sql_parse.cc:1902 #22 0x000055a2de709d03 in do_command (thd=thd@entry=0x7f5f50000db8, blocking=100) at /home/fuzzer/mariadb/sql/sql_parse.cc:1415 #23 0x000055a2dea027a4 in do_handle_one_connection (connect=, connect@entry=0x55a2e30ac648, put_in_cache=252) at /home/fuzzer/mariadb/sql/sql_connect.cc:1415 #24 0x000055a2dea0238d in handle_one_connection (arg=arg@entry=0x55a2e30ac648) at /home/fuzzer/mariadb/sql/sql_connect.cc:1327 #25 0x000055a2df20f33f in pfs_spawn_thread (arg=0x55a2e2fe8138) at /home/fuzzer/mariadb/storage/perfschema/pfs.cc:2198 #26 0x00007f5fa3bb3609 in start_thread (arg=) at pthread_create.c:477 #27 0x00007f5fa383d353 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95