mysql 频繁crash，求助大牛！

[kells_h]

[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/local/mysql/bin/mysqld --basedir=/usr/local/mysql --datadir=/data/mysql/my'.
Program terminated with signal SIGABRT, Aborted.
#0 0x00007f63d5c089d1 in pthread_kill () from /lib64/libpthread.so.0
[Current thread is 1 (Thread 0x7f6127df4700 (LWP 10085))]

Thread 49 (Thread 0x7f611b2e7700 (LWP 10046)):
#0 0x00007f63d5c0ad1d in fsync () from /lib64/libpthread.so.0
No symbol table info available.
#1 0x00000000010bbb64 in os_file_fsync_posix (file=12) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:3057
ret = <optimized out>
failures = 0
#2 os_file_flush_func (file=12) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:3161
ret = 0
#3 0x00000000012519a9 in pfs_os_file_flush_func (src_line=6009, file=..., src_file=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/include/os0file.ic:505
state = {m_flags = 3, m_operation = PSI_FILE_SYNC, m_file = 0x7f63cc876f00, m_name = 0x0, m_class = 0x367f8c0, m_thread = 0x7f63d0d0ee40, m_number_of_bytes = 6, m_timer_start = 3577309178508334, m_timer = 0x130ce90 <my_timer_cycles>, m_wait = 0x0}
locker = <optimized out>
src_file = 0x16333a8 "/export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc"
#4 fil_flush (space_id=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc:6009
old_mod_counter = 176
node = 0x14984f78
file = {m_file = 12, m_psi = <optimized out>}
space = 0xb0
#5 0x0000000001251c85 in fil_flush_file_spaces (purpose=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc:6100
i = <optimized out>
space = <optimized out>
space_ids = 0x7f60a00008d8
n_space_ids = 7
#6 0x00000000011f2a2b in buf_dblwr_update (bpage=<optimized out>, flush_type=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/buf/buf0dblwr.cc:750
No locals.
#7 0x00000000011e6e88 in buf_page_io_complete (bpage=0x7f6184408ff0, evict=false) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/buf/buf0buf.cc:5876
io_type = BUF_IO_WRITE
buf_pool = <optimized out>
uncompressed = <optimized out>
#8 0x000000000125948e in fil_aio_wait (segment=8) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc:5886
node = 0x14984f78
type = {m_block_size = 4096, m_type = 258, m_compression = {m_type = Compression::NONE}, m_encryption = {m_type = Encryption::NONE, m_key = 0x0, m_klen = 0, m_iv = 0x0, static master_key_id = 0, static uuid = '\000' <repeats 36 times>}}
message = 0x7f6184408ff0
err = <optimized out>
#9 0x000000000115deb0 in io_handler_thread (arg=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/srv/srv0start.cc:311
segment = 8
start = <optimized out>
#10 0x00007f63d5c03dd5 in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#11 0x00007f63d46bcead in clone () from /lib64/libc.so.6
No symbol table info available.

Thread 48 (Thread 0x7f611bae8700 (LWP 10045)):
#0 0x00007f63d59fa644 in __io_getevents_0_4 () from /lib64/libaio.so.1
No symbol table info available.
#1 0x00000000010ba474 in LinuxAIOHandler::collect (this=0x7f611bae7dd0) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:2504
events = 0x3a9d910
timeout = {tv_sec = 0, tv_nsec = 500000000}
ret = <optimized out>
io_ctx = 0x7f63cb005000
start_pos = 256
end_pos = 512
#2 0x00000000010bc684 in LinuxAIOHandler::poll (this=0x7f611bae7dd0, m1=0x7f611bae7e88, m2=0x7f611bae7e80, request=0x7f611bae7e50) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:2650
n_pending = 0
err = <optimized out>
slot = 0x0
#3 0x00000000010bca3c in os_aio_linux_handler (request=0x7f611bae7e50, m2=0x7f611bae7e80, m1=0x7f611bae7e88, global_segment=7) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:2706
handler = {m_array = 0x3a9b868, m_n_slots = 256, m_segment = 1, m_global_segment = 7}
err = <optimized out>
#4 os_aio_handler (segment=7, m1=0x7f611bae7e88, m2=0x7f611bae7e80, request=0x7f611bae7e50) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:6253
err = <optimized out>
#5 0x00000000012593cd in fil_aio_wait (segment=7) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc:5852
node = <optimized out>
type = {m_block_size = 512, m_type = 1, m_compression = {m_type = Compression::NONE}, m_encryption = {m_type = Encryption::NONE, m_key = 0x0, m_klen = 0, m_iv = 0x0, static master_key_id = 0, static uuid = '\000' <repeats 36 times>}}
message = <optimized out>
err = <optimized out>
#6 0x000000000115deb0 in io_handler_thread (arg=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/srv/srv0start.cc:311
segment = 7
start = <optimized out>
#7 0x00007f63d5c03dd5 in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#8 0x00007f63d46bcead in clone () from /lib64/libc.so.6
No symbol table info available.

Thread 47 (Thread 0x7f6127c68700 (LWP 10091)):
#0 0x00007f63d5c0af63 in pread64 () from /lib64/libpthread.so.0
No symbol table info available.
#1 0x00000000010b9c6b in os_file_io (in_type=..., file=47, buf=0x7f627aae4000, n=16384, offset=8339456, err=0x7f6127c6210c) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:5429
n_bytes = <optimized out>
i = <optimized out>
block = 0x0
original_n = 16384
type = {m_block_size = 4096, m_type = 1, m_compression = {m_type = Compression::NONE}, m_encryption = {m_type = Encryption::NONE, m_key = 0x0, m_klen = 0, m_iv = 0x0, static master_key_id = 0, static uuid = '\000' <repeats 36 times>}}
bytes_returned = <optimized out>
sync_file_io = {m_fh = 47, m_buf = 0x7f627aae4000, m_n = 16384, m_offset = 8339456}
#2 0x00000000010baf01 in os_file_pread (err=0x7f6127c6210c, offset=8339456, n=16384, buf=0x7f627aae4000, file=47, type=...) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:5606
n_bytes = <optimized out>
#3 os_file_read_page (type=..., file=47, buf=0x7f627aae4000, offset=8339456, n=16384, o=0x0, exit_on_err=true) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:5645
n_bytes = <optimized out>
err = 0
#4 0x00000000010bb447 in os_file_read_func (type=..., file=<optimized out>, buf=<optimized out>, offset=<optimized out>, n=<optimized out>) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/os/os0file.cc:6038
No locals.
#5 0x0000000001252b81 in pfs_os_aio_func (src_line=5795, src_file=0x16333a8 "/export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc", m2=0x7f627a780028, m1=0x14983708, read_only=false, n=16384, offset=8339456, buf=0x7f627aae4000, file=..., name=0x149837e8 "./mysql/innodb_index_stats.ibd", mode=24, type=...) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/include/os0file.ic:261
state = {m_flags = 3, m_operation = PSI_FILE_READ, m_file = 0x7f63cc876400, m_name = 0x0, m_class = 0x367f8c0, m_thread = 0x7f63d0d22d40, m_number_of_bytes = 140055255854240, m_timer_start = 3577309131308171, m_timer = 0x130ce90 <my_timer_cycles>, m_wait = 0x7f6228a02ed2}
locker = 0x7f6127c625f0
result = <optimized out>
#6 fil_io (type=..., sync=true, page_id=..., page_size=..., byte_offset=140055255852608, len=16384, buf=0x7f627aae4000, message=0x7f627a780028) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/fil/fil0fil.cc:5795
node = 0x14983708
err = <optimized out>
offset = 8339456
req_type = {m_block_size = 4096, m_type = 1, m_compression = {m_type = Compression::NONE}, m_encryption = {m_type = Encryption::NONE, m_key = 0x0, m_klen = 0, m_iv = 0x0, static master_key_id = 0, static uuid = '\000' <repeats 36 times>}}
mode = 24
space = 0x7f63cc876400
cur_page_no = <optimized out>
#7 0x0000000001209776 in buf_read_page_low (err=0x7f6127c62a3c, sync=true, type=0, mode=<optimized out>, page_id=..., page_size=..., unzip=false) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/buf/buf0rea.cc:195
bpage = 0x7f627a780028
dst = <optimized out>
request = {m_block_size = 512, m_type = 1, m_compression = {m_type = Compression::NONE}, m_encryption = {m_type = Encryption::NONE, m_key = 0x1 <error: Cannot access memory at address 0x1>, m_klen = 8192, m_iv = 0x1e00000000 <error: Cannot access memory at address 0x1e00000000>, static master_key_id = 0, static uuid = '\000' <repeats 36 times>}}
#8 0x000000000120a1f0 in buf_read_page (page_id=..., page_size=...) at /export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7.23/storage/innobase/buf/buf0rea.cc:447
count = <optimized out>
err = DB_SUCCESS
#9 0x00000000011ec311 in buf_page_get_gen (page_id=..., page_size=..., rw_latch=1, guess=<optimized out>, mode=10, file=0x161c9e0 "/export/home/pb2/build/sb_0-29016441-1528454776.43/mysql-5.7