segmentation fault invalid pointer

MySQL version / commit

9.7.2

Steps to reproduce

The query that caused the crash is unknown

2026-09-22T06:54:20.000000Z 0 [System] [MY-013951] [Server] 2026-09-22T06:54:20Z UTC - mysqld got signal 11 ; 2026-09-22T06:54:20.000001Z 0 [System] [MY-013951] [Server] Signal SIGSEGV (Address not mapped to object) at address 0x20 2026-09-22T06:54:20.000002Z 0 [System] [MY-013951] [Server] Most likely, you have hit a bug, but this error can also be caused by malfunctioning hardware. 2026-09-22T06:54:20.000003Z 0 [System] [MY-013951] [Server] BuildID[sha1]=4e655c4c20bb99cd13b0f076ba8504e24738ec92 2026-09-22T06:54:20.000004Z 0 [System] [MY-013951] [Server] Thread pointer: 0x7f32cc6eb820 2026-09-22T06:54:20.000005Z 0 [System] [MY-013951] [Server] Attempting backtrace. You can use the following information to find out 2026-09-22T06:54:20.000006Z 0 [System] [MY-013951] [Server] where mysqld died. If you see no messages after this, something went 2026-09-22T06:54:20.000007Z 0 [System] [MY-013951] [Server] terribly wrong... 2026-09-22T06:54:20.000008Z 0 [System] [MY-013951] [Server] stack_bottom = 7f32d8181b50 thread_stack 0x100000 2026-09-22T06:54:20.000009Z 0 [System] [MY-013951] [Server] #0 0x11549a4 print_fatal_signal at 9.7.2/mysql-9.7.2/sql/signal_handler.cc:321 2026-09-22T06:54:20.000010Z 0 [System] [MY-013951] [Server] #1 0x1154ed4 _Z19handle_fatal_signaliP9siginfo_tPv at 9.7.2/mysql-9.7.2/sql/signal_handler.cc:403 2026-09-22T06:54:20.000011Z 0 [System] [MY-013951] [Server] #2 0x7f32e8a502bf at sysdeps/unix/sysv/linux/x86_64/libc_sigaction.c:0 2026-09-22T06:54:20.000012Z 0 [System] [MY-013951] [Server] #3 0x2cf5a90 _ZNK9__gnu_cxx16__aligned_membufIN9temptable13Indexed_cellsEE7_M_addrEv at /usr/app/gcc/16.2.0/include/c++/16.2.0/ext/aligned_buffer.h:75 2026-09-22T06:54:20.000013Z 0 [System] [MY-013951] [Server] #4 0x2cf5a90 _ZNK9__gnu_cxx16__aligned_membufIN9temptable13Indexed_cellsEE6_M_ptrEv at /usr/app/gcc/16.2.0/include/c++/16.2.0/ext/aligned_buffer.h:83 2026-09-22T06:54:20.000014Z 0 [System] [MY-013951] [Server] #5 0x2cf5a90 _ZNKSt13_Rb_tree_nodeIN9temptable13Indexed_cellsEE9_M_valptrEv at /usr/app/gcc/16.2.0/include/c++/16.2.0/bits/stl_tree.h:235 2026-09-22T06:54:20.000015Z 0 [System] [MY-013951] [Server] #6 0x2cf5a90 _ZNKSt23_Rb_tree_const_iteratorIN9temptable13Indexed_cellsEEdeEv at /usr/app/gcc/16.2.0/include/c++/16.2.0/bits/stl_tree.h:471 2026-09-22T06:54:20.000016Z 0 [System] [MY-013951] [Server] #7 0x2cf5a90 _ZNK9temptable6Cursor13indexed_cellsEv at 9.7.2/mysql-9.7.2/storage/temptable/include/temptable/cursor.h:162 2026-09-22T06:54:20.000017Z 0 [System] [MY-013951] [Server] #8 0x2cf5a90 _ZN9temptable7Handler22index_next_conditionalEPhNS0_13NextConditionE at 9.7.2/mysql-9.7.2/storage/temptable/src/handler.cc:569 2026-09-22T06:54:20.000018Z 0 [System] [MY-013951] [Server] #9 0x12a47ed _ZN7handler13ha_index_nextEPh at 9.7.2/mysql-9.7.2/sql/handler.cc:3492 2026-09-22T06:54:20.000019Z 0 [System] [MY-013951] [Server] #10 0x12a5478 _ZN7handler15read_range_nextEv at 9.7.2/mysql-9.7.2/sql/handler.cc:7594 2026-09-22T06:54:20.000020Z 0 [System] [MY-013951] [Server] #11 0x12a5478 _ZN7handler15read_range_nextEv at 9.7.2/mysql-9.7.2/sql/handler.cc:7585 2026-09-22T06:54:20.000021Z 0 [System] [MY-013951] [Server] #12 0x12a5523 _ZN7handler21multi_range_read_nextEPPc at 9.7.2/mysql-9.7.2/sql/handler.cc:6646 2026-09-22T06:54:20.000022Z 0 [System] [MY-013951] [Server] #13 0x12a1997 _ZN7handler24ha_multi_range_read_nextEPPc at 9.7.2/mysql-9.7.2/sql/handler.cc:6600 2026-09-22T06:54:20.000023Z 0 [System] [MY-013951] [Server] #14 0x152f570 _ZN22IndexRangeScanIterator6DoReadEv at 9.7.2/mysql-9.7.2/sql/range_optimizer/index_range_scan.cc:374 2026-09-22T06:54:20.000024Z 0 [System] [MY-013951] [Server] #15 0x16123c8 _ZN11RowIterator4ReadEv at 9.7.2/mysql-9.7.2/sql/iterators/row_iterator.h:125 2026-09-22T06:54:20.000025Z 0 [System] [MY-013951] [Server] #16 0x16123c8 DoRead at 9.7.2/mysql-9.7.2/sql/iterators/composite_iterators.cc:3010 2026-09-22T06:54:20.000026Z 0 [System] [MY-013951] [Server] #17 0x16121be _ZN11RowIterator4ReadEv at 9.7.2/mysql-9.7.2/sql/iterators/row_iterator.h:125 2026-09-22T06:54:20.000027Z 0 [System] [MY-013951] [Server] #18 0x16121be _ZN14FilterIterator6DoReadEv at 9.7.2/mysql-9.7.2/sql/iterators/composite_iterators.cc:127 2026-09-22T06:54:20.000028Z 0 [System] [MY-013951] [Server] #19 0x16121be _ZN14FilterIterator6DoReadEv at 9.7.2/mysql-9.7.2/sql/iterators/composite_iterators.cc:123 2026-09-22T06:54:20.000029Z 0 [System] [MY-013951] [Server] #20 0x1613710 _ZN11RowIterator4ReadEv at 9.7.2/mysql-9.7.2/sql/iterators/row_iterator.h:125 2026-09-22T06:54:20.000030Z 0 [System] [MY-013951] [Server] #21 0x1613710 _ZN19LimitOffsetIterator6DoReadEv at 9.7.2/mysql-9.7.2/sql/iterators/composite_iterators.cc:209 2026-09-22T06:54:20.000031Z 0 [System] [MY-013951] [Server] #22 0x10a8a96 _ZN11RowIterator4ReadEv at 9.7.2/mysql-9.7.2/sql/iterators/row_iterator.h:125 2026-09-22T06:54:20.000032Z 0 [System] [MY-013951] [Server] #23 0x10a8a96 _ZN16Query_expression20ExecuteIteratorQueryEP3THD at 9.7.2/mysql-9.7.2/sql/sql_union.cc:1138 2026-09-22T06:54:20.000033Z 0 [System] [MY-013951] [Server] #24 0x10a915d _ZN16Query_expression7executeEP3THD at 9.7.2/mysql-9.7.2/sql/sql_union.cc:1200 2026-09-22T06:54:20.000034Z 0 [System] [MY-013951] [Server] #25 0x10139fa _ZN11Sql_cmd_dml13execute_innerEP3THD at 9.7.2/mysql-9.7.2/sql/sql_select.cc:1153 2026-09-22T06:54:20.000035Z 0 [System] [MY-013951] [Server] #26 0x1020ad8 _ZN11Sql_cmd_dml7executeEP3THD at 9.7.2/mysql-9.7.2/sql/sql_select.cc:798 2026-09-22T06:54:20.000036Z 0 [System] [MY-013951] [Server] #27 0xfa8a26 _Z21mysql_execute_commandP3THDb at 9.7.2/mysql-9.7.2/sql/sql_parse.cc:4766 2026-09-22T06:54:20.000037Z 0 [System] [MY-013951] [Server] #28 0xfac68e _Z20dispatch_sql_commandP3THDP12Parser_stateb at 9.7.2/mysql-9.7.2/sql/sql_parse.cc:5441 2026-09-22T06:54:20.000038Z 0 [System] [MY-013951] [Server] #29 0xfaf03d _Z16dispatch_commandP3THDPK8COM_DATA19enum_server_command at 9.7.2/mysql-9.7.2/sql/sql_parse.cc:2152 2026-09-22T06:54:20.000039Z 0 [System] [MY-013951] [Server] #30 0xfafc6e _Z10do_commandP3THD at 9.7.2/mysql-9.7.2/sql/sql_parse.cc:1491 2026-09-22T06:54:20.000040Z 0 [System] [MY-013951] [Server] #31 0x11434af handle_connection at 9.7.2/mysql-9.7.2/sql/conn_handler/connection_handler_per_thread.cc:304 2026-09-22T06:54:20.000041Z 0 [System] [MY-013951] [Server] #32 0x2c4dbe2 pfs_spawn_thread at 9.7.2/mysql-9.7.2/storage/perfschema/pfs.cc:3067 2026-09-22T06:54:20.000042Z 0 [System] [MY-013951] [Server] #33 0x7f32e8aa2c03 start_thread at /jlinux/source/glibc/2.44/glibc-2.44/nptl/pthread_create.c:454 2026-09-22T06:54:20.000043Z 0 [System] [MY-013951] [Server] #34 0x7f32e8b1fc47 __clone3 at sysdeps/unix/sysv/linux/x86_64/clone3.S:78 2026-09-22T06:54:20.000044Z 0 [System] [MY-013951] [Server] #35 0xffffffffffffffff 2026-09-22T06:54:20.000045Z 0 [System] [MY-013951] [Server] Trying to get some variables. 2026-09-22T06:54:20.000046Z 0 [System] [MY-013951] [Server] Some pointers may be invalid and cause the dump to abort. 2026-09-22T06:54:20.000047Z 0 [System] [MY-013951] [Server] Query (7f32ce030600): is an invalid pointer

Expected vs actual result

not crashing

Platform / compiler

Linux x64, gcc 16.2.0, glibc 2.44, amd zen5, kernel 6.18