Assertion `curr <= last' failed in rec_offs_validate

./mtr MDEV-35386.test --mysqld=--default_storage_engine=InnoDB --mysqld=--innodb-page-size=32K --mysqld=--innodb-log-file-size=32M --mysqld=--innodb-buffer-pool-size=32M

mariadbd: /10.11/src/storage/innobase/rem/rem0rec.cc:581: bool rec_offs_validate(const rec_t*, const dict_index_t*, const rec_offs*): Assertion `curr <= last' failed.

241111 18:40:19 [ERROR] mysqld got signal 6 ;

Server version: 10.11.11-MariaDB-debug-log source revision: a37f71bd10fea224b8f198cb42ca0320dffaf8eb

sql/signal_handler.cc:247(handle_fatal_signal)[0x55bac90c0bdc]

sigaction.c:0(__restore_rt)[0x7f9947fd7420]

rem/rem0rec.cc:582(rec_offs_validate(unsigned char const*, dict_index_t const*, unsigned short const*))[0x55bac9f18bd5]

include/rem0rec.inl:967(rec_offs_data_size(unsigned short const*))[0x55bac9fa8e69]

row/row0merge.cc:1448(row_merge_read_rec(unsigned char*, unsigned char (*) [65536], unsigned char const*, dict_index_t const*, pfs_os_file_t const&, unsigned long*, unsigned char const**, unsigned short*, unsigned char*, unsigned long))[0x55bac9fb4faf]

row/row0merge.cc:3154(row_merge_blocks(row_merge_dup_t const*, merge_file_t const*, unsigned char*, unsigned long*, unsigned long*, merge_file_t*, ut_stage_alter_t*, unsigned char*, unsigned long))[0x55bac9fc2bda]

row/row0merge.cc:3375(row_merge(trx_t*, row_merge_dup_t const*, merge_file_t*, unsigned char*, pfs_os_file_t*, unsigned long*, unsigned long*, ut_stage_alter_t*, unsigned char*, unsigned long))[0x55bac9fc54fc]

row/row0merge.cc:3521(row_merge_sort(trx_t*, row_merge_dup_t const*, merge_file_t*, unsigned char*, pfs_os_file_t*, bool, double, double, unsigned char*, unsigned long, ut_stage_alter_t*))[0x55bac9fc664f]

row/row0merge.cc:5271(row_merge_bulk_t::write_to_index(unsigned long, trx_t*))[0x55bac9fd2fd4]

row/row0merge.cc:5303(row_merge_bulk_t::write_to_table(dict_table_t*, trx_t*))[0x55bac9fd3509]

row/row0merge.cc:5325(trx_mod_table_time_t::write_bulk(dict_table_t*, trx_t*))[0x55bac9fd3747]

row/row0merge.cc:5354(trx_t::bulk_insert_apply_low())[0x55bac9fd3f9a]

include/trx0trx.h:1175(trx_t::bulk_insert_apply())[0x55bac9b8384c]

handler/ha_innodb.cc:15819(ha_innobase::extra(ha_extra_function))[0x55bac9b5d710]

sql/sql_table.cc:12219(copy_data_between_tables(THD*, TABLE*, TABLE*, bool, unsigned int, st_order*, unsigned long long*, unsigned long long*, Alter_info*, Alter_table_ctx*))[0x55bac8aaf5c2]

sql/sql_table.cc:11372(mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, Table_specification_st*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool, bool))[0x55bac8aa7d13]

sql/sql_alter.cc:688(Sql_cmd_alter_table::execute(THD*))[0x55bac8c7bea0]

sql/sql_parse.cc:6153(mysql_execute_command(THD*, bool))[0x55bac879ad9e]

sql/sql_parse.cc:8174(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x55bac87a81b0]

sql/sql_parse.cc:1908(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x55bac877cf8a]

sql/sql_parse.cc:1419(do_command(THD*, bool))[0x55bac8779c46]

sql/sql_connect.cc:1407(do_handle_one_connection(CONNECT*, bool))[0x55bac8c5cb27]

sql/sql_connect.cc:1321(handle_one_connection)[0x55bac8c5c67a]

perfschema/pfs.cc:2203(pfs_spawn_thread)[0x55bac98ed630]

nptl/pthread_create.c:478(start_thread)[0x7f9947fcb609]

Query (0x6290000fa2a8): alter table t add i1 int,  ALGORITHM=COPY

mariadbd: /10.11/src/storage/innobase/rem/rem0rec.cc:581: bool rec_offs_validate(const rec_t*, const dict_index_t*, const rec_offs*): Assertion `curr <= last' failed.

241111 18:42:17 [ERROR] mysqld got signal 6 ;

Server version: 10.11.11-MariaDB-debug-log source revision: a37f71bd10fea224b8f198cb42ca0320dffaf8eb

/lib/x86_64-linux-gnu/libc.so.6(+0x33fd6)[0x7fc5f0a97fd6]

rem/rem0rec.cc:582(rec_offs_validate(unsigned char const*, dict_index_t const*, unsigned short const*))[0x556964c57bd5]

include/rem0rec.inl:967(rec_offs_data_size(unsigned short const*))[0x556964ce7e69]

row/row0merge.cc:1448(row_merge_read_rec(unsigned char*, unsigned char (*) [65536], unsigned char const*, dict_index_t const*, pfs_os_file_t const&, unsigned long*, unsigned char const**, unsigned short*, unsigned char*, unsigned long))[0x556964cf3faf]

row/row0merge.cc:3154(row_merge_blocks(row_merge_dup_t const*, merge_file_t const*, unsigned char*, unsigned long*, unsigned long*, merge_file_t*, ut_stage_alter_t*, unsigned char*, unsigned long))[0x556964d01bda]

row/row0merge.cc:3375(row_merge(trx_t*, row_merge_dup_t const*, merge_file_t*, unsigned char*, pfs_os_file_t*, unsigned long*, unsigned long*, ut_stage_alter_t*, unsigned char*, unsigned long))[0x556964d044fc]

row/row0merge.cc:3521(row_merge_sort(trx_t*, row_merge_dup_t const*, merge_file_t*, unsigned char*, pfs_os_file_t*, bool, double, double, unsigned char*, unsigned long, ut_stage_alter_t*))[0x556964d0564f]

row/row0merge.cc:5271(row_merge_bulk_t::write_to_index(unsigned long, trx_t*))[0x556964d11fd4]

row/row0merge.cc:5303(row_merge_bulk_t::write_to_table(dict_table_t*, trx_t*))[0x556964d12509]

row/row0merge.cc:5325(trx_mod_table_time_t::write_bulk(dict_table_t*, trx_t*))[0x556964d12747]

row/row0merge.cc:5354(trx_t::bulk_insert_apply_low())[0x556964d12f9a]

include/trx0trx.h:1175(trx_t::bulk_insert_apply())[0x5569648c284c]

handler/ha_innodb.cc:15819(ha_innobase::extra(ha_extra_function))[0x55696489c710]

sql/sql_insert.cc:4371(select_insert::prepare_eof())[0x556963417569]

sql/sql_insert.cc:5172(select_create::send_eof())[0x55696341fb02]

sql/sql_select.cc:22440(do_select(JOIN*, Procedure*))[0x55696366e24d]

sql/sql_select.cc:4964(JOIN::exec_inner())[0x5569635ef1b5]

sql/sql_select.cc:4743(JOIN::exec())[0x5569635ec65a]

sql/sql_select.cc:5224(mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x5569635f0c7e]

sql/sql_select.cc:600(handle_select(THD*, LEX*, select_result*, unsigned long long))[0x5569635beb0a]

sql/sql_table.cc:12822(Sql_cmd_create_table_like::execute(THD*))[0x5569637f32a9]

sql/sql_parse.cc:6153(mysql_execute_command(THD*, bool))[0x5569634d9d9e]

sql/sql_parse.cc:8174(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x5569634e71b0]

sql/sql_parse.cc:1908(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x5569634bbf8a]

sql/sql_parse.cc:1419(do_command(THD*, bool))[0x5569634b8c46]

sql/sql_connect.cc:1407(do_handle_one_connection(CONNECT*, bool))[0x55696399bb27]

sql/sql_connect.cc:1321(handle_one_connection)[0x55696399b67a]

perfschema/pfs.cc:2203(pfs_spawn_thread)[0x55696462c630]

nptl/pthread_create.c:478(start_thread)[0x7fc5f1048609]

Query (0x6290000fa2a8): create table t2 as select * from t