Server crashes in handler_rowid_filter_check upon ANALYZE TABLE

CREATE TABLE t1 (a INT) ENGINE=MyISAM;

INSERT INTO t1 VALUES (1),(2);

CREATE TABLE t2 (b INT) ENGINE=MyISAM;

INSERT INTO t2 VALUES (1),(2); # Optional, fails either way

CREATE TABLE t3 (c INT) ENGINE=MyISAM;

INSERT INTO t3 VALUES (1),(2); # Optional, fails either way

CREATE TABLE t4 (pk INT, f CHAR(8), PRIMARY KEY(pk), KEY(f)) ENGINE=MyISAM;

INSERT INTO t4 VALUES (1,'o'),(2,'x');

ANALYZE TABLE t1, t2, t3, t4 PERSISTENT FOR ALL; # Optional, fails either way

SELECT * FROM t1 LEFT JOIN (t2 JOIN t3 ON 1) ON 2 IN (SELECT pk FROM t4 WHERE f < 's');

ANALYZE TABLE t4 PERSISTENT FOR ALL;

# Cleanup

DROP TABLE t1, t2, t3, t4;

#3  <signal handler called>

#4  0x00005630d3f0330e in handler_rowid_filter_check (h_arg=0x61d000244ab8) at /data/src/bb-11.0/sql/handler.cc:6953

#5  0x00005630d502c417 in mi_check_index_tuple_real (info=0x61f000016c98, keynr=1, record=0x619000099cc8 "\375\002") at /data/src/bb-11.0/storage/myisam/mi_key.c:557

#6  0x00005630d505ea53 in mi_check_index_tuple (info=0x61f000016c98, keynr=1, record=0x619000099cc8 "\375\002") at /data/src/bb-11.0/storage/myisam/myisamdef.h:752

#7  0x00005630d505f555 in mi_rnext (info=0x61f000016c98, buf=0x619000099cc8 "\375\002", inx=1) at /data/src/bb-11.0/storage/myisam/mi_rnext.c:104

#8  0x00005630d505e79e in mi_rfirst (info=0x61f000016c98, buf=0x619000099cc8 "\375\002", inx=1) at /data/src/bb-11.0/storage/myisam/mi_rfirst.c:26

#9  0x00005630d4fcdd5f in ha_myisam::index_first (this=0x61d000244ab8, buf=0x619000099cc8 "\375\002") at /data/src/bb-11.0/storage/myisam/ha_myisam.cc:2046

#10 0x00005630d3eed851 in handler::ha_index_first (this=0x61d000244ab8, buf=0x619000099cc8 "\375\002") at /data/src/bb-11.0/sql/handler.cc:3711

#11 0x00005630d38fe6f4 in collect_statistics_for_index (thd=0x62b00007e218, table=0x619000099798, index=1) at /data/src/bb-11.0/sql/sql_statistics.cc:2652

#12 0x00005630d38ff8a9 in collect_statistics_for_table (thd=0x62b00007e218, table=0x619000099798) at /data/src/bb-11.0/sql/sql_statistics.cc:2839

#13 0x00005630d3b0ff4e in mysql_admin_table (thd=0x62b00007e218, tables=0x6290000e6340, check_opt=0x62b000083918, operator_name=0x5630d68108e0 <msg_analyze>, lock_type=TL_READ_NO_INSERT, org_open_for_modify=true, repair_table_use_frm=false, extra_open_options=0, prepare_func=0x0, operator_func=(int (handler::*)(handler * const, THD *, HA_CHECK_OPT *)) 0x5630d3ef7cb0 <handler::ha_analyze(THD*, st_ha_check_opt*)>, view_operator_func=0x0, is_cmd_replicated=true) at /data/src/bb-11.0/sql/sql_admin.cc:986

#14 0x00005630d3b136b4 in Sql_cmd_analyze_table::execute (this=0x6290000e6a70, thd=0x62b00007e218) at /data/src/bb-11.0/sql/sql_admin.cc:1461

#15 0x00005630d36b26c9 in mysql_execute_command (thd=0x62b00007e218, is_called_from_prepared_stmt=false) at /data/src/bb-11.0/sql/sql_parse.cc:5999

#16 0x00005630d36be18a in mysql_parse (thd=0x62b00007e218, rawbuf=0x6290000e6238 "ANALYZE TABLE t4 PERSISTENT FOR ALL", length=35, parser_state=0x7f6a52cfdad0) at /data/src/bb-11.0/sql/sql_parse.cc:7998

#17 0x00005630d3696caf in dispatch_command (command=COM_QUERY, thd=0x62b00007e218, packet=0x629000253219 "", packet_length=35, blocking=true) at /data/src/bb-11.0/sql/sql_parse.cc:1894

#18 0x00005630d369411e in do_command (thd=0x62b00007e218, blocking=true) at /data/src/bb-11.0/sql/sql_parse.cc:1407

#19 0x00005630d3adb4a3 in do_handle_one_connection (connect=0x608000002638, put_in_cache=true) at /data/src/bb-11.0/sql/sql_connect.cc:1416

#20 0x00005630d3adae64 in handle_one_connection (arg=0x6080000025b8) at /data/src/bb-11.0/sql/sql_connect.cc:1318

#21 0x00005630d45cd99a in pfs_spawn_thread (arg=0x617000004d98) at /data/src/bb-11.0/storage/perfschema/pfs.cc:2201

#22 0x00007f6a5c4bfea7 in start_thread (arg=<optimized out>) at pthread_create.c:477

#23 0x00007f6a5c0aeaef in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95