Server crashes in Item_field::used_tables on 2nd call of SP

--source include/have_innodb.inc

CREATE OR REPLACE TABLE t1 (i1 INT, i2 INT) ENGINE=InnoDB WITH SYSTEM VERSIONING;

CREATE OR REPLACE PROCEDURE pr() SELECT * from t1 WHERE i2 IN (SELECT i1 FROM t1);

CALL pr;

CALL pr;

# Cleanup

DROP PROCEDURE pr;

DROP TABLE t1;

#3  <signal handler called>

#4  0x0000555ee223e995 in Item_field::used_tables (this=0x7f546c09c438) at /data/src/bb-10.3-temporal/sql/item.cc:3484

#5  0x0000555ee20f7c7f in optimize_semijoin_nests (join=0x7f546c03cf58, all_table_map=3) at /data/src/bb-10.3-temporal/sql/opt_subselect.cc:2355

#6  0x0000555ee1f8e304 in make_join_statistics (join=0x7f546c03cf58, tables_list=..., keyuse_array=0x7f546c03d248) at /data/src/bb-10.3-temporal/sql/sql_select.cc:4993

#7  0x0000555ee1f83497 in JOIN::optimize_inner (this=0x7f546c03cf58) at /data/src/bb-10.3-temporal/sql/sql_select.cc:1964

#8  0x0000555ee1f81d62 in JOIN::optimize (this=0x7f546c03cf58) at /data/src/bb-10.3-temporal/sql/sql_select.cc:1549

#9  0x0000555ee1f8b4be in mysql_select (thd=0x7f546c000b00, tables=0x7f546c09b8a8, wild_num=0, fields=..., conds=0x7f546c03ccf8, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2147749632, result=0x7f546c03cf38, unit=0x7f546c09cbd0, select_lex=0x7f546c09d330) at /data/src/bb-10.3-temporal/sql/sql_select.cc:4237

#10 0x0000555ee1f7d56c in handle_select (thd=0x7f546c000b00, lex=0x7f546c09cb08, result=0x7f546c03cf38, setup_tables_done_option=0) at /data/src/bb-10.3-temporal/sql/sql_select.cc:380

#11 0x0000555ee1f4878f in execute_sqlcom_select (thd=0x7f546c000b00, all_tables=0x7f546c09b8a8) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:6532

#12 0x0000555ee1f3edf6 in mysql_execute_command (thd=0x7f546c000b00) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:3749

#13 0x0000555ee23b06fc in sp_instr_stmt::exec_core (this=0x7f546c09c7e8, thd=0x7f546c000b00, nextp=0x7f54c0095754) at /data/src/bb-10.3-temporal/sql/sp_head.cc:3407

#14 0x0000555ee23afb1e in sp_lex_keeper::reset_lex_and_exec_core (this=0x7f546c09c838, thd=0x7f546c000b00, nextp=0x7f54c0095754, open_tables=false, instr=0x7f546c09c7e8) at /data/src/bb-10.3-temporal/sql/sp_head.cc:3123

#15 0x0000555ee23b02bc in sp_instr_stmt::execute (this=0x7f546c09c7e8, thd=0x7f546c000b00, nextp=0x7f54c0095754) at /data/src/bb-10.3-temporal/sql/sp_head.cc:3310

#16 0x0000555ee23aa401 in sp_head::execute (this=0x7f546c09aa68, thd=0x7f546c000b00, merge_da_on_success=true) at /data/src/bb-10.3-temporal/sql/sp_head.cc:1220

#17 0x0000555ee23aca81 in sp_head::execute_procedure (this=0x7f546c09aa68, thd=0x7f546c000b00, args=0x7f546c0055f8) at /data/src/bb-10.3-temporal/sql/sp_head.cc:2101

#18 0x0000555ee1f3c7dd in do_execute_sp (thd=0x7f546c000b00, sp=0x7f546c09aa68) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:2919

#19 0x0000555ee1f3d343 in Sql_cmd_call::execute (this=0x7f546c014d00, thd=0x7f546c000b00) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:3161

#20 0x0000555ee1f475a5 in mysql_execute_command (thd=0x7f546c000b00) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:6258

#21 0x0000555ee1f4c0e4 in mysql_parse (thd=0x7f546c000b00, rawbuf=0x7f546c014c48 "CALL pr", length=7, parser_state=0x7f54c00975f0, is_com_multi=false, is_next_command=false) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:7988

#22 0x0000555ee1f398a7 in dispatch_command (command=COM_QUERY, thd=0x7f546c000b00, packet=0x7f546c1611f1 "CALL pr", packet_length=7, is_com_multi=false, is_next_command=false) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:1826

#23 0x0000555ee1f382db in do_command (thd=0x7f546c000b00) at /data/src/bb-10.3-temporal/sql/sql_parse.cc:1371

#24 0x0000555ee209eada in do_handle_one_connection (connect=0x555ee4e527a0) at /data/src/bb-10.3-temporal/sql/sql_connect.cc:1420

#25 0x0000555ee209e867 in handle_one_connection (arg=0x555ee4e527a0) at /data/src/bb-10.3-temporal/sql/sql_connect.cc:1326

#26 0x0000555ee2534cfc in pfs_spawn_thread (arg=0x555ee4e76f10) at /data/src/bb-10.3-temporal/storage/perfschema/pfs.cc:1863

#27 0x00007f54cef9b494 in start_thread (arg=0x7f54c0098700) at pthread_create.c:333

#28 0x00007f54cd38193f in clone () from /lib/x86_64-linux-gnu/libc.so.6