TiFlash crash in HashJoin

[yibin87]

set @@tidb_isolation_read_engines='tiflash,tidb'; set @@tidb_allow_mpp=1;SELECT table1 . col_varchar_binary_not_null_key IN ( SELECT 'p' UNION SELECT 's' ) AS field1 FROM ( C AS table1 RIGHT OUTER JOIN ( ( EE AS table2 INNER JOIN R AS table3 ON (table3 . col_decimal_30_10_not_null = table2 . pk ) ) ) ON (table3 . col_decimal_not_null_key = table2 . col_int_key ) ) WHERE ( table3 . col_int_not_null_key >= ( SELECT SUM( SUBQUERY2_t1 . col_int ) AS SUBQUERY2_field1 FROM P AS SUBQUERY2_t1 ) ) OR ( ( SELECT SUM( SUBQUERY3_t1 . col_varchar_binary_key ) AS SUBQUERY3_field1 FROM ( B AS SUBQUERY3_t1 LEFT JOIN W AS SUBQUERY3_t2 ON (SUBQUERY3_t2 . col_varchar_binary_key = SUBQUERY3_t1 . col_varchar_binary_not_null ) ) WHERE ( SUBQUERY3_t1 . col_int_not_null = 1 AND SUBQUERY3_t1 . col_varchar_binary >= SUBQUERY3_t1 . col_varchar_binary_not_null ) ) IS NOT NULL OR table1 . col_varchar_binary_not_null <> table1 . col_varchar_binary_key ) ;

Stack:
[2023-12-31T07:20:28.045Z] [2023/12/31 07:20:11.694 +00:00] [ERROR] [BaseDaemon.cpp:560] ["
0x77b93b1\tfaultSignalHandler(int, siginfo_t*, void*) [tiflash+125539249]
\tlibs/libdaemon/src/BaseDaemon.cpp:211
0x7f352e8e0c20\t [libpthread.so.0+76832]
0x7c63090\tDB::Join::handleOtherConditions(DB::Block&, DB::PODArray<unsigned char, 4096ul, Allocator, 15ul, 16ul>, DB::PODArray<unsigned long, 4096ul, Allocator, 15ul, 16ul>, std::__1::vector<unsigned long, std::__1::allocator > const&) const [tiflash+130429072]
\tdbms/src/Interpreters/Join.cpp:1033
0x7c809b0\tDB::Join::joinBlock(DB::ProbeProcessInfo&, bool) const [tiflash+130550192]
\tdbms/src/Interpreters/Join.cpp:2249
0x88ce3b7\tDB::HashJoinProbeTransformOp::transformHeaderImpl(DB::Block&) [tiflash+143451063]
\tdbms/src/Operators/HashJoinProbeTransformOp.cpp:61
0x899cc2f\tDB::PipelineExecBuilder::appendTransformOp(std::__1::unique_ptr<DB::TransformOp, std::__1::default_deleteDB::TransformOp >&&) [tiflash+144297007]
\tdbms/src/Flash/Pipeline/Exec/PipelineExecBuilder.cpp:28
0x8a46195\tDB::PhysicalJoinProbe::buildPipelineExecGroupImpl(DB::PipelineExecutorContext&, DB::PipelineExecGroupBuilder&, DB::Context&, unsigned long) [tiflash+144990613]
\tdbms/src/Flash/Planner/Plans/PhysicalJoinProbe.cpp:50
0x89d55ce\tDB::PhysicalPlanNode::buildPipelineExecGroup(DB::PipelineExecutorContext&, DB::PipelineExecGroupBuilder&, DB::Context&, unsigned long) [tiflash+144528846] \tdbms/src/Flash/Planner/PhysicalPlanNode.cpp:130
0x8991f7f\tDB::Pipeline::buildExecGroup(DB::PipelineExecutorContext&, DB::Context&, unsigned long) [tiflash+144252799]
\tdbms/src/Flash/Pipeline/Pipeline.cpp:202
0x89aca02\tDB::PlainPipelineEvent::scheduleImpl() [tiflash+144361986]
\tdbms/src/Flash/Pipeline/Schedule/Events/PlainPipelineEvent.cpp:24
0x89a5bc2\tDB::Event::schedule() [tiflash+144333762]
\tdbms/src/Flash/Pipeline/Schedule/Events/Event.cpp:132
0x89a6c5c\tDB::Event::finish() [tiflash+144338012]
\tdbms/src/Flash/Pipeline/Schedule/Events/Event.cpp:193
0x89b5780\tDB::EventTask::finalizeImpl() [tiflash+144398208]
\tdbms/src/Flash/Pipeline/Schedule/Tasks/EventTask.cpp:41
0x89bb8b2\tDB::Task::finalize() [tiflash+144423090]
\tdbms/src/Flash/Pipeline/Schedule/Tasks/Task.cpp:162
0x1eb30bb\tDB::TaskThreadPoolDB::CPUImpl::loop(unsigned long) [tiflash+32190651]
\tdbms/src/Flash/Pipeline/Schedule/ThreadPool/TaskThreadPool.cpp:61
0x1eb3806\tvoid* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_deletestd::__1::__thread_struct >, void (DB::TaskThreadPoolDB::CPUImpl::)(unsigned long), DB::TaskThreadPoolDB::CPUImpl, unsigned long> >(void*) [tiflash+32192518]
\t/usr/local/bin/../include/c++/v1/thread:291
0x7f352e8d617a\tstart_thread [libpthread.so.0+33146]"] [source=BaseDaemon] [thread_id=1296]