Got testcase ****

DROP DATABASE test;CREATE DATABASE test;USE test;
xa start'','';
CREATE TEMPORARY TABLE t1(a INT,b INT,INDEX z(a));
savepoint x;
INSERT INTO t1 VALUES(3,2);
update t1 set a=a + 5;
SET innodb_fake_changes=1;
rollback to savepoint x;
UPDATE t1 SET a=2;

Seems it is similar assertion.

***** GDB info

#0  0x00007f8988d3b771 in pthread_kill () from /lib64/libpthread.so.0
#1  0x0000000000ab7586 in my_write_core (sig=6) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/mysys/stacktrace.c:422
#2  0x000000000072f9ff in handle_fatal_signal (sig=6) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/signal_handler.cc:236
#3  <signal handler called>
#4  0x00007f898793f5c9 in raise () from /lib64/libc.so.6
#5  0x00007f8987940cd8 in abort () from /lib64/libc.so.6
#6  0x0000000000c1864e in row_upd_sec_index_entry (node=0x7f88cb077ad0, thr=0x7f88cb077d80) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/innobase/row/row0upd.cc:1794
#7  0x0000000000c18929 in row_upd_sec_step (node=0x7f88cb077ad0, thr=0x7f88cb077d80) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/innobase/row/row0upd.cc:1866
#8  0x0000000000c1a2b6 in row_upd (node=0x7f88cb077ad0, thr=0x7f88cb077d80) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/innobase/row/row0upd.cc:2569
#9  0x0000000000c1a5b5 in row_upd_step (thr=0x7f88cb077d80) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/innobase/row/row0upd.cc:2686
#10 0x0000000000bdaa0a in row_update_for_mysql (mysql_rec=0x7f88cb09a820 "\371\b", prebuilt=0x7f88cb077078) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/innobase/row/row0mysql.cc:1791
#11 0x0000000000ad7990 in ha_innobase::update_row (this=0x7f88cb0aa510, old_row=0x7f88cb09a820 "\371\b", new_row=0x7f88cb09a810 "\371\002") at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/innobase/handler/ha_innodb.cc:7768
#12 0x000000000064cc99 in handler::ha_update_row (this=0x7f88cb0aa510, old_data=0x7f88cb09a820 "\371\b", new_data=0x7f88cb09a810 "\371\002") at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/handler.cc:7680
#13 0x0000000000879052 in mysql_update (thd=0x7f88f43f2000, table_list=0x7f88cb01f0e8, fields=..., values=..., conds=0x0, order_num=0, order=0x0, limit=18446744073709551615, handle_duplicates=DUP_ERROR, ignore=false, found_return=0x7f898932c8d0, updated_return=0x7f898932c8c8) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_update.cc:818
#14 0x00000000007e4d76 in mysql_execute_command (thd=0x7f88f43f2000) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_parse.cc:3715
#15 0x00000000007ed193 in mysql_parse (thd=0x7f88f43f2000, rawbuf=0x7f88cb01f010 "UPDATE t1 SET a=2", length=17, parser_state=0x7f898932cdf0) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_parse.cc:6773
#16 0x00000000007df5fc in dispatch_command (command=COM_QUERY, thd=0x7f88f43f2000, packet=0x7f88eae41001 "UPDATE t1 SET a=2", packet_length=17) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_parse.cc:1432
#17 0x00000000007de528 in do_command (thd=0x7f88f43f2000) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_parse.cc:1049
#18 0x00000000007a64e5 in do_handle_one_connection (thd_arg=0x7f88f43f2000) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_connect.cc:1532
#19 0x00000000007a5fed in handle_one_connection (arg=0x7f88f43f2000) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/sql/sql_connect.cc:1443
#20 0x0000000000dc5bac in pfs_spawn_thread (arg=0x7f8984fffb00) at /mnt/workspace/percona-server-5.6-binaries-debug-yassl/label_exp/centos6-64/percona-server-5.6.21-69.0/storage/perfschema/pfs.cc:1860
#21 0x00007f8988d36df3 in start_thread () from /lib64/libpthread.so.0
#22 0x00007f8987a0001d in clone () from /lib64/libc.so.6


Attached error log