Set up a fresh environment, configured encryption and replication, and set up pt-table-checksum to check the database that is replicated. The database is still empty, no records in there yet. Whenever pt-table-checksum runs, it crashes the server.
I have an older environment running 10.1.21. Configuration-wise it is an exact replica of the fresh environment (except for the older MariaDB version). pt-table-checksum works fine there.