This is a backport of
Bug#18563112 SELECT INTO VARIABLE CRASH IN USER_VAR_ENTRY::STORE

In Item_func_set_user_var::update_hash:
call entry->set_null_value() rather than entry->store() for NULL input.