SIGSEGV in closefrm on FLUSH TABLES after UNINSTALL SONAME of a pluggable data type

INSTALL SONAME 'type_test';

CREATE TABLE t1 (i test_int8);

SELECT * FROM t1;

UNINSTALL SONAME 'type_test';

FLUSH TABLES;

Core was generated by `/test/MD070926-mariadb-13.1.0-linux-x86_64-opt/bin/mariadbd --no-defaults --loo'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  0x00005d28a8aff333 in closefrm (table=table@entry=0x765544032f20)at /test/13.1_opt/sql/table.cc:4916

4916	      delete *ptr;

[Current thread is 1 (LWP 2729440)]

(gdb) bt

#0  0x00005d28a8aff333 in closefrm (table=table@entry=0x765544032f20)at /test/13.1_opt/sql/table.cc:4916

#1  0x00005d28a8bfd438 in intern_close_table (table=0x765544032f20)at /test/13.1_opt/sql/table_cache.cc:230

#2  tc_purge () at /test/13.1_opt/sql/table_cache.cc:324

#3  0x00005d28a8995dc8 in purge_tables () at /test/13.1_opt/sql/sql_base.cc:338

#4  close_cached_tables (thd=thd@entry=0x765544000c70, tables=tables@entry=0x0, wait_for_refresh=true, timeout=<optimized out>)at /test/13.1_opt/sql/sql_base.cc:367

#5  0x00005d28a8b535b6 in reload_acl_and_cache (thd=thd@entry=0x765544000c70, options=4, tables=tables@entry=0x0, write_to_binlog=write_to_binlog@entry=0x7e5678b68160)at /test/13.1_opt/sql/sql_reload.cc:370

#6  0x00005d28a8a0fc6f in mysql_execute_command (thd=thd@entry=0x765544000c70, is_called_from_prepared_stmt=false) at /test/13.1_opt/sql/sql_parse.cc:5403

#7  0x00005d28a8a08d52 in mysql_parse (thd=thd@entry=0x765544000c70, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7e5678b68580)at /test/13.1_opt/sql/sql_parse.cc:7968

#8  0x00005d28a8a07310 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x765544000c70, packet=packet@entry=0x765544008e61 "FLUSH TABLES", packet_length=packet_length@entry=12, blocking=true)at /test/13.1_opt/sql/sql_parse.cc:1903

#9  0x00005d28a8a091d1 in do_command (thd=thd@entry=0x765544000c70, blocking=true) at /test/13.1_opt/sql/sql_parse.cc:1437

#10 0x00005d28a8b350cd in do_handle_one_connection (connect=<optimized out>, connect@entry=0x5d28e5d50470, put_in_cache=true)at /test/13.1_opt/sql/sql_connect.cc:1514

#11 0x00005d28a8b34f02 in handle_one_connection (arg=arg@entry=0x5d28e5d50470)at /test/13.1_opt/sql/sql_connect.cc:1426

#12 0x00005d28a8ee14a3 in pfs_spawn_thread (arg=0x5d28e5d70e60)at /test/13.1_opt/storage/perfschema/pfs.cc:2198

#13 0x00007e568329cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#14 0x00007e5683329d6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

Core was generated by `/test/MD070926-mariadb-13.1.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --loo'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  0x00005b7e58f4907c in closefrm (table=0x75e35804b030)at /test/13.1_dbg/sql/table.cc:4916

4916	      delete *ptr;

[Current thread is 1 (LWP 2727975)]

(gdb) bt

#0  0x00005b7e58f4907c in closefrm (table=0x75e35804b030)at /test/13.1_dbg/sql/table.cc:4916

#1  0x00005b7e59105ac3 in intern_close_table (table=0x75e35804b030)at /test/13.1_dbg/sql/table_cache.cc:230

#2  0x00005b7e59105798 in tc_purge () at /test/13.1_dbg/sql/table_cache.cc:324

#3  0x00005b7e58cd203e in purge_tables () at /test/13.1_dbg/sql/sql_base.cc:338

#4  0x00005b7e58cd2201 in close_cached_tables (thd=0x75e358000d60, tables=0x0, wait_for_refresh=true, timeout=86400) at /test/13.1_dbg/sql/sql_base.cc:367

#5  0x00005b7e58fec485 in reload_acl_and_cache (thd=0x75e358000d60, options=4, tables=0x0, write_to_binlog=0x7de4301b6bb4)at /test/13.1_dbg/sql/sql_reload.cc:370

#6  0x00005b7e58db4ba1 in mysql_execute_command (thd=0x75e358000d60, is_called_from_prepared_stmt=false) at /test/13.1_dbg/sql/sql_parse.cc:5403

#7  0x00005b7e58da6294 in mysql_parse (thd=0x75e358000d60, rawbuf=0x75e35801a490 "FLUSH TABLES", length=12, parser_state=0x7de4301b7a80) at /test/13.1_dbg/sql/sql_parse.cc:7968

#8  0x00005b7e58da35bd in dispatch_command (command=COM_QUERY, thd=0x75e358000d60, packet=0x75e35800b6c1 "FLUSH TABLES", packet_length=12, blocking=true) at /test/13.1_dbg/sql/sql_parse.cc:1903

#9  0x00005b7e58da6e43 in do_command (thd=0x75e358000d60, blocking=true)at /test/13.1_dbg/sql/sql_parse.cc:1437

#10 0x00005b7e58fac289 in do_handle_one_connection (connect=0x5b7e816e9e10, put_in_cache=true) at /test/13.1_dbg/sql/sql_connect.cc:1514

#11 0x00005b7e58fac02e in handle_one_connection (arg=0x5b7e816a3740)at /test/13.1_dbg/sql/sql_connect.cc:1426

#12 0x00007de43209cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#13 0x00007de432129d6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

    Rel    o/d  Build   Commit                                    UniqueID observed

CS  10.6   dbg  170826  210ab6edf47fa73f3b77e974ed2e9357ccdd051c  No bug found

CS  10.6   opt  170826  210ab6edf47fa73f3b77e974ed2e9357ccdd051c  No bug found

CS  10.11  dbg  020926  1bc9eca856a32065fddce1db68edcfa6f4342578  No bug found

CS  10.11  opt  020926  1bc9eca856a32065fddce1db68edcfa6f4342578  No bug found

CS  11.4   dbg  020926  79f96bf15d2538cb78201cc85681571f56548957  No bug found

CS  11.4   opt  020926  79f96bf15d2538cb78201cc85681571f56548957  No bug found

CS  11.8   dbg  170826  d26f9ab217a7fcf9d4eccc62c01020ff275ff42e  No bug found

CS  11.8   opt  170826  d26f9ab217a7fcf9d4eccc62c01020ff275ff42e  No bug found

CS  12.3   dbg  170826  91156c3de58762196605150ab3f756fe952592d1  No bug found

CS  12.3   opt  170826  91156c3de58762196605150ab3f756fe952592d1  No bug found

CS  13.0   dbg  170826  a848493c6fe031f23606144420c1ca1e467cbd81  No bug found

CS  13.0   opt  170826  a848493c6fe031f23606144420c1ca1e467cbd81  No bug found

CS  13.1   dbg  070926  b2a8c2234dbc276fe3947633c9ffea454badf48f  SIGSEGV|closefrm|intern_close_table|tc_purge|purge_tables

CS  13.1   opt  070926  b2a8c2234dbc276fe3947633c9ffea454badf48f  SIGSEGV|closefrm|intern_close_table|tc_purge|purge_tables

ES  11.4   dbg  060526  90f707057d44f1b5c013a0c3672fd12f32ea7085  No bug found

ES  11.4   opt  060526  90f707057d44f1b5c013a0c3672fd12f32ea7085  No bug found

ES  11.8   dbg  060526  1499789de285a8109d68d79347de0281865b28f4  No bug found

ES  11.8   opt  060526  1499789de285a8109d68d79347de0281865b28f4  No bug found