### What problem does this PR solve?

Issue Number: DORIS-28199

Problem Summary:

Condition-cache granule skipping can call ORC seekToRow before the
existing nextBatch exception boundary. When a query is cancelled during
that I/O, the ORC input stream throws a stop exception that escapes
get_block and may terminate the BE process.

### Release note

Fix BE process termination when an ORC scan is cancelled during
condition-cache seeking.

### Check List (For Author)

- Test
    - [x] Regression test
    - [x] Unit Test
    - [ ] Manual test
    - [ ] No need to test or manual test.

Verification: NewOrcReaderTest.* passed 163/163 under ASAN_UT.
Clang-format 16 passed for both affected C++ files.

- Behavior changed:
    - [ ] No.
- [x] Yes. Cancellation during a condition-cache seek now returns clean
EOF instead of allowing the ORC stop exception to escape.

- Does this need documentation?
    - [x] No.
    - [ ] Yes.

### Check List (For Reviewer who merge this PR)

- [ ] Confirm the release note
- [ ] Confirm test cases
- [ ] Confirm document
- [ ] Add branch pick label

…#67141 (#67321)

Cherry-picked from #67141

Co-authored-by: Gabriel <[email protected]>

### What problem does this PR solve?

Issue Number: N/A

Related PR: apache#67141

Problem Summary: The legacy ORC reader performs RowID seekToRow before the exception handlers around nextBatch. A seek can read a missing or unreadable file and throw orc::ParseError, which escapes the external row-fetch worker because its Doris exception boundary does not catch std::exception. Catch seek exceptions before dispatching either lazy or non-lazy reads and return an error with the file and cause. Keep the existing clean-EOF convention only for a stopped reader throwing "stop"; report other I/O failures even if cancellation races with them. Set the row count to zero when no requested RowIDs remain.

### Release note

Fix BE termination when an ORC RowID seek fails during external TopN late materialization.

### Check List (For Author)

- Test: Add real-ORC seek unit cases and an injected-error Hive TopN regression. Build hygiene, clang-format 16, diff checking and Groovy syntax compilation passed. BE build is blocked by the missing LLVM 20 third-party toolchain; UT download was stopped before execution; regression framework rejects existing duplicate Gson declarations. clang-tidy lacks a compilation database. Runtime verification remains for CI.
- Behavior changed: Yes. Seek exceptions return errors; cancelled stop reads retain EOF behavior.
- Does this need documentation: No

### What problem does this PR solve?

Issue Number: N/A

Related PR: #67141

The legacy ORC reader performs RowID seekToRow before the exception
handlers around nextBatch. A seek can throw orc::ParseError while
reading a missing or unreadable file, and that std::exception can escape
the external row-fetch worker and terminate the BE.

Catch seek exceptions before lazy or non-lazy reads and return an error
with the file and cause. Preserve Doris exception propagation and error
classification. Keep clean EOF only for a stopped reader throwing
"stop"; report unrelated I/O errors even when cancellation races with
them. Return zero rows when no requested RowIDs remain.

The injected-error regression lives in its own
`p0,external,hive,nonConcurrent` suite with a separate catalog and the
preloaded Hive fixture. It pins the legacy-reader and TopN settings,
asserts phase-two materialization, checks the expected seek failure, and
verifies a successful five-row query after removing the debug point.
Debug-point cleanup and session restoration run in finally blocks. The
original TopN suite retains its concurrent correctness coverage.

The branch has been rebased onto master `6e5a8929fba`, including the
unrelated BE UT compile fix #69487.

### Release note

Fix BE termination when an ORC RowID seek fails during external TopN
late materialization.

### Check List (For Author)

- Test:
- Added real-ORC seek unit cases for lazy/non-lazy errors, cancellation,
Doris exception propagation, empty RowIDs and normal seek progression.
Runtime verification remains for CI.
- Groovy 4.0.19 CONVERSION-phase compilation passed for both regression
suites.
- Local mock execution passed serial-group validation, independent
catalog setup, recovery-query execution, and debug-point/session cleanup
after success, unexpected query failure and partial enable failure.
  - git diff --check passed.
- ./run-regression-test.sh --compile remains blocked by pre-existing
duplicate Gson declarations rejected by the local Maven installation.
Mocks do not replace live cluster regression.
- BE UT and External Regression reruns requested for the updated head.
The external runner enables -runNonConcurrent true.
- Behavior changed: Yes. Seek exceptions return errors; cancelled stop
reads retain EOF behavior.
- Does this need documentation: No.

### Self-review

- Goal and scope: repair the seek exception boundary and move only its
global injection into an independently runnable serial suite.
- Parallel paths: lazy and non-lazy seeks share the exception boundary;
Doris errors retain their worker-side handling.
- Concurrency and lifecycle: the all-BE injection is serial, scoped to
one debug point, and removed before recovery. Session settings are
restored on every exit.
- Coverage and observability: the plan assertion ensures phase-two
materialization; expected error matching and recovery remain enforced.
The returned error includes the file and underlying cause.
- Compatibility: no new configuration, FE/BE protocol, persistence,
transaction or storage-format changes.