Server crashes in JOIN::optimize_inner with condition_pushdown_from_having=on upon 2nd execution of SP

set optimizer_switch='condition_pushdown_from_having=on';

CREATE TABLE t1 ( pk int, i int);

INSERT INTO t1 VALUES (10,1),(14,1),(16,1),(17,1);

prepare stmt from 

"SELECT i FROM t1 WHERE 6 IN (SELECT MAX(pk) FROM t1) AND i = 17

GROUP BY i HAVING i < 1;";

execute stmt;

execute stmt;

#3  <signal handler called>

#4  0x000055c61775bc81 in JOIN::optimize_inner (this=0x7f48c80598a0) at /10.4/sql/sql_select.cc:1902

#5  0x000055c61775a9d6 in JOIN::optimize (this=0x7f48c80598a0) at /10.4/sql/sql_select.cc:1551

#6  0x000055c617b42a58 in Item_in_subselect::optimize (this=0x7f48c803a2b0, out_rows=0x7f490f567e48, cost=0x7f490f567e50) at /10.4/sql/item_subselect.cc:770

#7  0x000055c6178f9d5a in setup_jtbm_semi_joins (join=0x7f48c8058170, join_list=0x7f48c8039f90, eq_list=...) at /10.4/sql/opt_subselect.cc:6045

#8  0x000055c61775c2bf in JOIN::optimize_inner (this=0x7f48c8058170) at /10.4/sql/sql_select.cc:1970

#9  0x000055c61775a9d6 in JOIN::optimize (this=0x7f48c8058170) at /10.4/sql/sql_select.cc:1551

#10 0x000055c6177659fe in mysql_select (thd=0x7f48c8000a98, tables=0x7f48c8052da0, wild_num=0, fields=..., conds=0x7f48c805ae20, og_num=1, order=0x0, group=0x7f48c8054ff0, having=0x7f48c8055200, proc_param=0x0, select_options=2416184064, result=0x7f48c8038ba0, unit=0x7f48c80511c8, select_lex=0x7f48c8039da0) at /10.4/sql/sql_select.cc:4571

#11 0x000055c617755ede in handle_select (thd=0x7f48c8000a98, lex=0x7f48c8051100, result=0x7f48c8038ba0, setup_tables_done_option=0) at /10.4/sql/sql_select.cc:424

#12 0x000055c61771e6c4 in execute_sqlcom_select (thd=0x7f48c8000a98, all_tables=0x7f48c8052da0) at /10.4/sql/sql_parse.cc:6601

#13 0x000055c61771379e in mysql_execute_command (thd=0x7f48c8000a98) at /10.4/sql/sql_parse.cc:3889

#14 0x000055c617740fef in Prepared_statement::execute (this=0x7f48c8090428, expanded_query=0x7f490f569390, open_cursor=false) at /10.4/sql/sql_prepare.cc:4756

#15 0x000055c61773f5cc in Prepared_statement::execute_loop (this=0x7f48c8090428, expanded_query=0x7f490f569390, open_cursor=false, packet=0x0, packet_end=0x0) at /10.4/sql/sql_prepare.cc:4242

#16 0x000055c61773d1d9 in mysql_sql_stmt_execute (thd=0x7f48c8000a98) at /10.4/sql/sql_prepare.cc:3359

#17 0x000055c6177137e3 in mysql_execute_command (thd=0x7f48c8000a98) at /10.4/sql/sql_parse.cc:3905

#18 0x000055c61772261c in mysql_parse (thd=0x7f48c8000a98, rawbuf=0x7f48c803a510 "execute stmt", length=12, parser_state=0x7f490f569ff0, is_com_multi=false, is_next_command=false) at /10.4/sql/sql_parse.cc:8154

#19 0x000055c61770d8ec in dispatch_command (command=COM_QUERY, thd=0x7f48c8000a98, packet=0x7f48c8009da9 "execute stmt", packet_length=12, is_com_multi=false, is_next_command=false) at /10.4/sql/sql_parse.cc:1832

#20 0x000055c61770c080 in do_command (thd=0x7f48c8000a98) at /10.4/sql/sql_parse.cc:1365

#21 0x000055c61788bf1b in do_handle_one_connection (connect=0x55c61bd6bc68) at /10.4/sql/sql_connect.cc:1398

#22 0x000055c61788bc59 in handle_one_connection (arg=0x55c61bd6bc68) at /10.4/sql/sql_connect.cc:1301

#23 0x000055c61821a227 in pfs_spawn_thread (arg=0x55c61bd204f8) at /10.4/storage/perfschema/pfs.cc:1862

#24 0x00007f491becb6ba in start_thread (arg=0x7f490f56b700) at pthread_create.c:333

#25 0x00007f491b15c41d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109