Trigger Definer Already Same But User Still Denied
Per documentation on create user, netmasks are only valid on the previous class A,B,C addresses. So masks such as 255.255.240.0 are invalid.
I haven't found a feature request for this feature, however obvious it seems, on https://jira.mariadb.org if you'd like to request one.