A query crashes MariaDB in Item_func_regex::cleanup

Faulting application name: mysqld.exe, version: 10.2.6.0, time stamp: 0x5918ebb7

Faulting module name: ntdll.dll, version: 6.3.9600.18438, time stamp: 0x57ae642e

Exception code: 0xc0000374

Fault offset: 0x00000000000f1b70

Faulting process id: 0x900

Faulting application start time: 0x01d2d85c2b53e01b

Faulting application path: C:\WebForce\MariaDB\bin\mysqld.exe

Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

Report Id: ce3a50e4-4450-11e7-80cb-00259068c2fb

Faulting package full name: 

Faulting package-relative application ID: 

Fault bucket , type 0

Event Name: APPCRASH

Response: Not available

Cab Id: 0

Problem signature:

P1: mysqld.exe

P2: 10.2.6.0

P3: 5918ebb7

P4: StackHash_6aab

P5: 6.3.9600.18438

P6: 57ae642e

P7: c0000374

P8: PCH_9C_FROM_ntdll+0x0000000000090C6A

P9: 

P10: 

Attached files:

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mysqld.exe_40864ec89f71876499b2d1917651eb4df4ef6_433f6772_5447a9b4

Analysis symbol: 

Rechecking for solution: 0

Report Id: ce3a50e4-4450-11e7-80cb-00259068c2fb

Report Status: 0

Hashed bucket: 

explain SELECT a

FROM

(

SELECT DISTINCT(gid) a FROM invite_chat

WHERE date_inv between '2017-03-01' and '2017-04-01'

UNION

SELECT DISTINCT(login) a FROM invite_chat

WHERE date_inv between '2017-03-01' and '2017-04-01'

)t1

WHERE a REGEXP '^[0-9]{3,6}$' 

CREATE TABLE `invite_chat` (

  `id` int(15) NOT NULL AUTO_INCREMENT,

  `login` varchar(25) CHARACTER SET cp1251 DEFAULT NULL,

  `gid` varchar(25) CHARACTER SET cp1251 DEFAULT NULL,

  `mess` text CHARACTER SET cp1251 DEFAULT NULL,

  `date_inv` timestamp NULL DEFAULT NULL,

  `status_` tinyint(1) unsigned DEFAULT 0,

  `last_mess` int(11) unsigned DEFAULT NULL,

  `start` tinyint(4) unsigned DEFAULT 0,

  `end` tinyint(4) unsigned DEFAULT 0,

  `date_change_status` timestamp NULL DEFAULT NULL,

  `checked` tinyint(1) unsigned DEFAULT 0,

  `is_bc_response` tinyint(1) unsigned DEFAULT 0,

  `suspicious` tinyint(1) unsigned DEFAULT 0,

  `update_demand` tinyint(1) unsigned DEFAULT 0,

  `is_camera_on` tinyint(1) unsigned DEFAULT 0,

  `vc_refused` tinyint(1) unsigned DEFAULT 0,

  `half_empty_mins` smallint(5) unsigned DEFAULT 0,

  PRIMARY KEY (`id`) KEY_BLOCK_SIZE=4,

  KEY `date_inv` (`date_inv`) KEY_BLOCK_SIZE=4,

  KEY `gid` (`gid`) USING HASH KEY_BLOCK_SIZE=4,

  KEY `login` (`login`,`gid`) USING HASH KEY_BLOCK_SIZE=4

) ENGINE=InnoDB AUTO_INCREMENT=9838587 DEFAULT CHARSET=utf8 ROW_FORMAT=DYNAMIC `page_compressed`=0