Server crash in s3_block_read upon full-text search in S3 table

DROP TABLE IF EXISTS t;

CREATE TABLE t (a CHAR(64), FULLTEXT(a)) ENGINE=Aria;

INSERT INTO t VALUES ('planner'),('note');

ALTER TABLE t ENGINE=S3;

SELECT MATCH (a) AGAINST ('scatter' IN NATURAL LANGUAGE MODE) from t;

DROP TABLE t;

#3  <signal handler called>

#4  0x00007f69907a97d2 in s3_block_read (pagecache=0x7f69907df4c0 <s3_pagecache>, args=0x7f698614a730, file=0x7f69869409e0, block=0x7f698614a770) at /data/src/10.5/storage/maria/s3_func.c:1592

#5  0x0000000002095dde in read_big_block (pagecache=0x7f69907df4c0 <s3_pagecache>, block=0x7f698669e888) at /data/src/10.5/storage/maria/ma_pagecache.c:2893

#6  0x0000000002091e29 in pagecache_read (pagecache=0x7f69907df4c0 <s3_pagecache>, file=0x621000094080, pageno=1, level=3, buff=0x0, type=PAGECACHE_PLAIN_PAGE, lock=PAGECACHE_LOCK_READ, page_link=0x7f698614b5e0) at /data/src/10.5/storage/maria/ma_pagecache.c:3792

#7  0x000000000214629e in _ma_fetch_keypage (page=0x7f698614bb30, info=0x6290002fd288, keyinfo=0x621000094748, pos=8192, lock=PAGECACHE_LOCK_READ, level=3, buff=0x0, return_buffer=0 '\000') at /data/src/10.5/storage/maria/ma_page.c:110

#8  0x0000000002128a37 in _ma_search_no_save (info=0x6290002fd288, key=0x7f698614c490, nextflag=1, pos=8192, res_page_link=0x7f698614c220, res_page_buff=0x7f698614c240) at /data/src/10.5/storage/maria/ma_search.c:146

#9  0x00000000021277eb in _ma_search (info=0x6290002fd288, key=0x7f698614c490, nextflag=1, pos=8192) at /data/src/10.5/storage/maria/ma_search.c:77

#10 0x0000000002317ff8 in walk_and_match (word=0x6250000fa1c8, count=1, aio=0x7f698614d100) at /data/src/10.5/storage/maria/ma_ft_nlq_search.c:96

#11 0x000000000347966d in tree_walk_left_root_right (tree=0x7f698614cde0, element=0x6250000fa1a8, action=0x2317810 <walk_and_match>, argument=0x7f698614d100) at /data/src/10.5/mysys/tree.c:590

#12 0x00000000034793c0 in tree_walk (tree=0x7f698614cde0, action=0x2317810 <walk_and_match>, argument=0x7f698614d100, visit=left_root_right) at /data/src/10.5/mysys/tree.c:576

#13 0x0000000002316d58 in maria_ft_init_nlq_search (info=0x6290002fd288, keynr=0, query=0x62b0000389c8 "scatter", query_len=7, flags=0, record=0x61900009ca38 "\377", ' ' <repeats 64 times>, '\276' <repeats 87 times>, "\030\313\t") at /data/src/10.5/storage/maria/ma_ft_nlq_search.c:256

#14 0x0000000002296424 in maria_ft_init_search (flags=0, info=0x6290002fd288, keynr=0, query=0x62b0000389c8 "scatter", query_len=7, cs=0x4fdd2a0 <my_charset_latin1>, record=0x61900009ca38 "\377", ' ' <repeats 64 times>, '\276' <repeats 87 times>, "\030\313\t") at /data/src/10.5/storage/maria/ft_maria.c:33

#15 0x000000000200c053 in ha_maria::ft_init_ext (this=0x61d000210d28, flags=0, inx=0, key=0x62b000038a10) at /data/src/10.5/storage/maria/ha_maria.cc:3420

#16 0x0000000001a02566 in Item_func_match::init_search (this=0x62b000038aa8, thd=0x62b000069288, no_order=false) at /data/src/10.5/sql/item_func.cc:6213

#17 0x0000000000b1159e in init_ftfuncs (thd=0x62b000069288, select_lex=0x62b0000383a0, no_order=false) at /data/src/10.5/sql/sql_base.cc:9031

#18 0x0000000000e2c73a in JOIN::optimize_stage2 (this=0x62b000039e28) at /data/src/10.5/sql/sql_select.cc:2875

#19 0x0000000000e380d7 in JOIN::optimize_inner (this=0x62b000039e28) at /data/src/10.5/sql/sql_select.cc:2354

#20 0x0000000000e2462b in JOIN::optimize (this=0x62b000039e28) at /data/src/10.5/sql/sql_select.cc:1686

#21 0x0000000000e07baf in mysql_select (thd=0x62b000069288, tables=0x62b000038d28, fields=..., conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2147748608, result=0x62b000039df8, unit=0x62b00006d430, select_lex=0x62b0000383a0) at /data/src/10.5/sql/sql_select.cc:4803

#22 0x0000000000e06a93 in handle_select (thd=0x62b000069288, lex=0x62b00006d368, result=0x62b000039df8, setup_tables_done_option=0) at /data/src/10.5/sql/sql_select.cc:444

#23 0x0000000000d37bc9 in execute_sqlcom_select (thd=0x62b000069288, all_tables=0x62b000038d28) at /data/src/10.5/sql/sql_parse.cc:6315

#24 0x0000000000d1c2c8 in mysql_execute_command (thd=0x62b000069288) at /data/src/10.5/sql/sql_parse.cc:4006

#25 0x0000000000d02f93 in mysql_parse (thd=0x62b000069288, rawbuf=0x62b0000382a8 "SELECT MATCH (a) AGAINST ('scatter' IN NATURAL LANGUAGE MODE) from t", length=68, parser_state=0x7f6986156a40, is_com_multi=false, is_next_command=false) at /data/src/10.5/sql/sql_parse.cc:8101

#26 0x0000000000cfb1ec in dispatch_command (command=COM_QUERY, thd=0x62b000069288, packet=0x629000262289 "SELECT MATCH (a) AGAINST ('scatter' IN NATURAL LANGUAGE MODE) from t", packet_length=68, is_com_multi=false, is_next_command=false) at /data/src/10.5/sql/sql_parse.cc:1891

#27 0x0000000000d05833 in do_command (thd=0x62b000069288) at /data/src/10.5/sql/sql_parse.cc:1375

#28 0x00000000012b00cb in do_handle_one_connection (connect=0x61100000b608, put_in_cache=true) at /data/src/10.5/sql/sql_connect.cc:1416

#29 0x00000000012af7e4 in handle_one_connection (arg=0x61100000b4c8) at /data/src/10.5/sql/sql_connect.cc:1318

#30 0x00000000023c0a08 in pfs_spawn_thread (arg=0x616000104808) at /data/src/10.5/storage/perfschema/pfs.cc:2201

#31 0x00007f69981fdea7 in start_thread (arg=<optimized out>) at pthread_create.c:477

#32 0x00007f6997f35def in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95