MySQL 5.6.23 community edition with server_audit.so file from MariDB 10.1.11 and 10.1.24

Please attach the error log and your cnf file(s).

If you have more information about the problem, please comment and the issue will be re-opened.

2017-05-16 00:14:00 11387 [Note] Event Scheduler: Loaded 0 events
2017-05-16 00:14:00 11387 [Note] /usr/sbin/mysqld: ready for connections.
mysql.sock' port: 3306 MySQL Community Server (GPL)
170621 20:50:55 server_audit: MariaDB Audit Plugin version 1.4.1 STARTED.
170621 20:51:36 server_audit: logging started to the file server_audit.log.
20:52:42 UTC - mysqld got signal 11 ;
This could be because you hit a bug. It is also possible that this binary
or one of the libraries it was linked against is corrupt, improperly built,
or misconfigured. This error can also be caused by malfunctioning hardware.
We will try our best to scrape up some info that will hopefully help
diagnose the problem, but since we have already crashed,
something is definitely wrong and this may fail.

key_buffer_size=8388608
read_buffer_size=131072
max_used_connections=33
max_threads=500
thread_count=3
connection_count=3
It is possible that mysqld could use up to
key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 207043 K bytes of memory
Hope that's ok; if not, decrease some variables in the equation.

Thread pointer: 0x2db63b0
Attempting backtrace. You can use the following information to find out
where mysqld died. If you see no messages after this, something went
terribly wrong...
stack_bottom = 7f551839fe90 thread_stack 0x40000
/usr/sbin/mysqld(my_print_stacktrace+0x3b)[0x8e008b]
/usr/sbin/mysqld(handle_fatal_signal+0x491)[0x672d81]
/lib64/libpthread.so.0(+0xf370)[0x7f5548795370]
/usr/lib64/mysql/plugin/server_audit.so(+0x38e5)[0x7f55123678e5]
/usr/lib64/mysql/plugin/server_audit.so(+0x5162)[0x7f5512369162]
/usr/lib64/mysql/plugin/server_audit.so(+0x5a58)[0x7f5512369a58]
/usr/lib64/mysql/plugin/server_audit.so(+0x8249)[0x7f551236c249]
/usr/sbin/mysqld(_ZN17sys_var_pluginvar13global_updateEP3THDP7set_var+0x63)[0x6ff3d3]
/usr/sbin/mysqld(_ZN7sys_var6updateEP3THDP7set_var+0x58)[0x6716d8]
/usr/sbin/mysqld(_ZN7set_var6updateEP3THD+0x17)[0x671b37]
/usr/sbin/mysqld(_Z17sql_set_variablesP3THDP4ListI12set_var_baseE+0x71)[0x6723f1]
/usr/sbin/mysqld(_Z21mysql_execute_commandP3THD+0x2559)[0x6eff19]
/usr/sbin/mysqld(_Z11mysql_parseP3THDPcjP12Parser_state+0x3c8)[0x6f4168]
/usr/sbin/mysqld(_Z16dispatch_command19enum_server_commandP3THDPcj+0xff6)[0x6f58e6]
/usr/sbin/mysqld(_Z24do_handle_one_connectionP3THD+0x152)[0x6c36a2]
/usr/sbin/mysqld(handle_one_connection+0x40)[0x6c3760]
/usr/sbin/mysqld(pfs_spawn_thread+0x143)[0x974833]
/lib64/libpthread.so.0(+0x7dc5)[0x7f554878ddc5]
/lib64/libc.so.6(clone+0x6d)[0x7f55476626ed]

Trying to get some variables.
Some pointers may be invalid and cause the dump to abort.
Query (7f54d4005400): is an invalid pointer
Connection ID (thread ID): 267
Status: NOT_KILLED
The manual page at http://dev.mysql.com/doc/mysql/en/crashing.html contains
information that should help you find out what is causing the crash.
170621 20:52:42 mysqld_safe Number of processes running now: 0
170621 20:52:42 mysqld_safe mysqld restarted
2017-06-21 20:52:42 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2017-06-21 20:52:42 4920 [Note] Plugin 'FEDERATED' is disabled.
2017-06-21 20:52:42 4920 [Note] InnoDB: Using atomics to ref count buffer pool pages
2017-06-21 20:52:42 4920 [Note] InnoDB: The InnoDB memory heap is disabled
2017-06-21 20:52:42 4920 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
2017-06-21 20:52:42 4920 [Note] InnoDB: Memory barrier is not used
2017-06-21 20:52:42 4920 [Note] InnoDB: Compressed tables use zlib 1.2.3
2017-06-21 20:52:42 4920 [Note] InnoDB: Using Linux native AIO
2017-06-21 20:52:42 4920 [Note] InnoDB: Using CPU crc32 instructions
2017-06-21 20:52:42 4920 [Note] InnoDB: Initializing buffer pool, size = 128.0M
2017-06-21 20:52:42 4920 [Note] InnoDB: Completed initialization of buffer pool
2017-06-21 20:52:42 4920 [Note] InnoDB: Highest supported file format is Barracuda.
2017-06-21 20:52:42 4920 [Note] InnoDB: The log sequence numbers 37698515796 and 37698515796 in ibdata files do not match the log sequence number 37698526315 in the ib_logfiles!
2017-06-21 20:52:42 4920 [Note] InnoDB: Database was not shutdown normally!
2017-06-21 20:52:42 4920 [Note] InnoDB: Starting crash recovery.
2017-06-21 20:52:42 4920 [Note] InnoDB: Reading tablespace information from the .ibd files...
2017-06-21 20:52:42 4920 [Note] InnoDB: Restoring possible half-written data pages
2017-06-21 20:52:42 4920 [Note] InnoDB: from the doublewrite buffer...
InnoDB: Last MySQL binlog file position 0 920, file name mysql-bin.000037
2017-06-21 20:52:42 4920 [Note] InnoDB: 128 rollback segment(s) are active.
2017-06-21 20:52:42 4920 [Note] InnoDB: Waiting for purge to start
2017-06-21 20:52:42 4920 [Note] InnoDB: 5.6.23 started; log sequence number 37698526315
170621 20:52:42 server_audit: MariaDB Audit Plugin version 1.4.1 STARTED.
2017-06-21 20:52:42 4920 [Note] Recovering after a crash using mysql-bin
2017-06-21 20:52:42 4920 [Note] Starting crash recovery...
2017-06-21 20:52:42 4920 [Note] Crash recovery finished.
2017-06-21 20:52:42 4920 [Note] Server hostname (bind-address): '*'; port: 3306
2017-06-21 20:52:42 4920 [Note] IPv6 is available.
2017-06-21 20:52:42 4920 [Note] - '::' resolves to '::';
2017-06-21 20:52:42 4920 [Note] Server socket created on IP: '::'.
2017-06-21 20:52:42 4920 [Note] Event Scheduler: Loaded 0 events
2017-06-21 20:52:42 4920 [Note] /usr/sbin/mysqld: ready for connections.
Version: '5.6.23-log' socket: '/apps/mysql/run/mysql.sock' port: 3306 MySQL Community Server (GPL)
2017-06-21 20:56:13 4920 [Note] /usr/sbin/mysqld: Normal shutdown

2017-06-21 20:56:13 4920 [Note] Giving 1 client threads a chance to die gracefully
2017-06-21 20:56:13 4920 [Note] Event Scheduler: Purging the queue. 0 events
2017-06-21 20:56:13 4920 [Note] Shutting down slave threads
2017-06-21 20:56:13 4920 [Note] Forcefully disconnecting 0 remaining clients
2017-06-21 20:56:13 4920 [Note] Binlog end
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'SERVER_AUDIT'
170621 20:56:13 server_audit: STOPPED
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'partition'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_DATAFILES'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_TABLESPACES'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_FOREIGN_COLS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_FOREIGN'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_FIELDS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_COLUMNS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_INDEXES'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_TABLESTATS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_SYS_TABLES'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_FT_INDEX_TABLE'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_FT_INDEX_CACHE'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_FT_CONFIG'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_FT_BEING_DELETED'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_FT_DELETED'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_FT_DEFAULT_STOPWORD'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_METRICS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_BUFFER_POOL_STATS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_BUFFER_PAGE_LRU'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_BUFFER_PAGE'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_CMP_PER_INDEX_RESET'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_CMP_PER_INDEX'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_CMPMEM_RESET'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_CMPMEM'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_CMP_RESET'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_CMP'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_LOCK_WAITS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_LOCKS'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'INNODB_TRX'
2017-06-21 20:56:13 4920 [Note] Shutting down plugin 'InnoDB'
2017-06-21 20:56:13 4920 [Note] InnoDB: FTS optimize thread exiting.
2017-06-21 20:56:13 4920 [Note] InnoDB: Starting shutdown...
2017-06-21 20:56:15 4920 [Note] InnoDB: Shutdown completed; log sequence number 37698530522
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'BLACKHOLE'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'PERFORMANCE_SCHEMA'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'ARCHIVE'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'CSV'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'MEMORY'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'MRG_MYISAM'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'MyISAM'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'sha256_password'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'mysql_old_password'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'mysql_native_password'
2017-06-21 20:56:15 4920 [Note] Shutting down plugin 'binlog'
2017-06-21 20:56:15 4920 [Note] /usr/sbin/mysqld: Shutdown complete

170621 20:56:15 mysqld_safe mysqld from pid file /apps/mysql/run/mysqld.pid ended
170621 20:56:15 mysqld_safe Starting mysqld daemon with databases from /apps/mysql/data
2017-06-21 20:56:16 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2017-06-21 20:56:16 5374 [Note] Plugin 'FEDERATED' is disabled.
2017-06-21 20:56:16 5374 [Note] InnoDB: Using atomics to ref count buffer pool pages
2017-06-21 20:56:16 5374 [Note] InnoDB: The InnoDB memory heap is disabled
2017-06-21 20:56:16 5374 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
2017-06-21 20:56:16 5374 [Note] InnoDB: Memory barrier is not used
2017-06-21 20:56:16 5374 [Note] InnoDB: Compressed tables use zlib 1.2.3
2017-06-21 20:56:16 5374 [Note] InnoDB: Using Linux native AIO
2017-06-21 20:56:16 5374 [Note] InnoDB: Using CPU crc32 instructions
2017-06-21 20:56:16 5374 [Note] InnoDB: Initializing buffer pool, size = 128.0M
2017-06-21 20:56:16 5374 [Note] InnoDB: Completed initialization of buffer pool
2017-06-21 20:56:16 5374 [Note] InnoDB: Highest supported file format is Barracuda.
2017-06-21 20:56:16 5374 [Note] InnoDB: 128 rollback segment(s) are active.
2017-06-21 20:56:16 5374 [Note] InnoDB: Waiting for purge to start
2017-06-21 20:56:16 5374 [Note] InnoDB: 5.6.23 started; log sequence number 37698530522
170621 20:56:16 server_audit: MariaDB Audit Plugin version 1.4.1 STARTED.
2017-06-21 20:56:16 5374 [Note] Server hostname (bind-address): '*'; port: 3306
2017-06-21 20:56:16 5374 [Note] IPv6 is available.
2017-06-21 20:56:16 5374 [Note] - '::' resolves to '::';
2017-06-21 20:56:16 5374 [Note] Server socket created on IP: '::'.
2017-06-21 20:56:16 5374 [Note] Event Scheduler: Loaded 0 events
2017-06-21 20:56:16 5374 [Note] /usr/sbin/mysqld: ready for connections.
Version: '5.6.23-log' socket: '/apps/mysql/run/mysql.sock' port: 3306 MySQL Community Server (GPL)
2017-06-22 00:08:39 5374 [Note] /usr/sbin/mysqld: Normal shutdown

2017-06-22 00:08:39 5374 [Note] Giving 1 client threads a chance to die gracefully
2017-06-22 00:08:39 5374 [Note] Event Scheduler: Purging the queue. 0 events
2017-06-22 00:08:39 5374 [Note] Shutting down slave threads
2017-06-22 00:08:39 5374 [Note] Forcefully disconnecting 0 remaining clients
2017-06-22 00:08:39 5374 [Note] Binlog end
2017-06-22 00:08:39 5374 [Note] Shutting down plugin 'SERVER_AUDIT'
170622 0:08:39 server_audit: STOPPED

Thanks for the report.
Reproduced with mysql 5.6.23 and server_audit.so from MariaDB 10.1.24. Server was started with server_audit_logging=ON option, then crashed after query

SET GLOBAL server_audit_logging=OFF;

core dump

Thread 1 (Thread 0x7ff19b406700 (LWP 16944)):

#0  __pthread_kill (threadid=<optimized out>, signo=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:62

#1  0x000000000067320a in handle_fatal_signal (sig=11) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/signal_handler.cc:230

#2  <signal handler called>

#3  filter_query_type (query=0x4f4f4f4f4f4f4f4f <error: Cannot access memory at address 0x4f4f4f4f4f4f4f4f>, kwd=0x7ff1a954a6e0 <passwd_keywords>) at /home/buildbot/buildbot/build/plugin/server_audit/server_audit.c:1502

#4  0x00007ff1a9343162 in log_statement_ex (cn=<optimized out>, ev_time=5714873654208057167, thd_id=<optimized out>, query=<optimized out>, query_len=1024, error_code=0, type=0x7ff1a9347d89 "QUERY") at /home/buildbot/buildbot/build/plugin/server_audit/server_audit.c:1678

#5  0x00007ff1a9343a58 in log_current_query (thd=0x1e78a10) at /home/buildbot/buildbot/build/plugin/server_audit/server_audit.c:2527

#6  0x00007ff1a9346249 in update_logging (thd=0x1e78a10, var=<optimized out>, var_ptr=0x1000, save=0x4f4f4f4f4f4f4f4f) at /home/buildbot/buildbot/build/plugin/server_audit/server_audit.c:2741

#7  0x000000000070014d in sys_var_pluginvar::global_update (this=0x19e4308, thd=0x1e78a10, var=<optimized out>) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_plugin.cc:3271

#8  0x00000000006724da in sys_var::update (this=0x19e4308, thd=0x1e78a10, var=0x7ff1880058d8) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/set_var.cc:194

#9  0x00000000006729da in set_var::update (this=0x402, thd=0x7ff1a954a6e0 <passwd_keywords>) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/set_var.cc:670

#10 0x0000000000671f79 in sql_set_variables (thd=0x1e78a10, var_list=<optimized out>) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/set_var.cc:573

#11 0x00000000006f311f in mysql_execute_command (thd=0x1e78a10) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_parse.cc:3713

#12 0x00000000006f8c48 in mysql_parse (thd=0x1e78a10, rawbuf=0x7ff1880056f0 "SET GLOBAL server_audit_logging=OFF", length=<optimized out>, parser_state=<optimized out>) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_parse.cc:6357

#13 0x00000000006f9f9b in dispatch_command (command=COM_QUERY, thd=0x1e78a10, packet=<optimized out>, packet_length=35) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_parse.cc:1332

#14 0x00000000006fbd97 in do_command (thd=0x1e78a10) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_parse.cc:1034

#15 0x00000000006c39b6 in do_handle_one_connection (thd_arg=0x1e78a10) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_connect.cc:982

#16 0x00000000006c3a95 in handle_one_connection (arg=0x1e78a10) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/sql/sql_connect.cc:898

#17 0x0000000000ad9ae6 in pfs_spawn_thread (arg=<optimized out>) at /export/home/pb2/build/sb_0-14135570-1421676610.55/mysql-5.6.23/storage/perfschema/pfs.cc:1860

#18 0x00007ff1c4be66ba in start_thread (arg=0x7ff19b406700) at pthread_create.c:333

#19 0x00007ff1c38353dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

error log

12:09:14 UTC - mysqld got signal 11 ;

key_buffer_size=8388608

read_buffer_size=131072

max_used_connections=1

max_threads=151

thread_count=1

connection_count=1

It is possible that mysqld could use up to 

key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 68245 K  bytes of memory

Hope that's ok; if not, decrease some variables in the equation.

Thread pointer: 0x1e78a10

Attempting backtrace. You can use the following information to find out

where mysqld died. If you see no messages after this, something went

terribly wrong...

stack_bottom = 7ff19b405e90 thread_stack 0x40000

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(my_print_stacktrace+0x35)[0x909d45]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(handle_fatal_signal+0x3d8)[0x6731e8]

/lib/x86_64-linux-gnu/libpthread.so.0(+0x11390)[0x7ff1c4bf0390]

/home/alice/AM/_depot/o-tar/5.6.23/lib/plugin/server_audit.so(+0x38e5)[0x7ff1a93418e5]

/home/alice/AM/_depot/o-tar/5.6.23/lib/plugin/server_audit.so(+0x5162)[0x7ff1a9343162]

/home/alice/AM/_depot/o-tar/5.6.23/lib/plugin/server_audit.so(+0x5a58)[0x7ff1a9343a58]

/home/alice/AM/_depot/o-tar/5.6.23/lib/plugin/server_audit.so(+0x8249)[0x7ff1a9346249]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_ZN17sys_var_pluginvar13global_updateEP3THDP7set_var+0x5d)[0x70014d]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_ZN7sys_var6updateEP3THDP7set_var+0x6a)[0x6724da]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_ZN7set_var6updateEP3THD+0x1a)[0x6729da]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_Z17sql_set_variablesP3THDP4ListI12set_var_baseE+0x89)[0x671f79]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_Z21mysql_execute_commandP3THD+0x14cf)[0x6f311f]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_Z11mysql_parseP3THDPcjP12Parser_state+0x318)[0x6f8c48]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_Z16dispatch_command19enum_server_commandP3THDPcj+0xbcb)[0x6f9f9b]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_Z10do_commandP3THD+0xd7)[0x6fbd97]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(_Z24do_handle_one_connectionP3THD+0x116)[0x6c39b6]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(handle_one_connection+0x45)[0x6c3a95]

/home/alice/AM/o1-5.6.23/../_depot/o-tar/5.6.23/bin/mysqld(pfs_spawn_thread+0x126)[0xad9ae6]

/lib/x86_64-linux-gnu/libpthread.so.0(+0x76ba)[0x7ff1c4be66ba]

/lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7ff1c38353dd]

Trying to get some variables.

Some pointers may be invalid and cause the dump to abort.

Query (7ff1880056f0): SET GLOBAL server_audit_logging=OFF

Connection ID (thread ID): 2

Status: NOT_KILLED