Assertion Failed at /mariadb-11.3.0/sql/item_subselect.cc:1936

Run these queries in debug build:

CREATE TABLE t0 ( c31 DECIMAL ( 53 ) DEFAULT ( 71 ) ) ;
INSERT INTO t0 VALUES ( 1106158570540604767 ) , ( -71 ) ;
ALTER TABLE t0 ADD COLUMN c15 INT AFTER c31 ;
INSERT INTO t0 VALUES ( 6 , -72 ) , ( 34 , 104 ) ;
SELECT AVG ( c25 ) IN ( SELECT c25 AS c14 FROM t0 GROUP BY c25 , c31 HAVING - BIT_LENGTH ( 125 ) % EXISTS ( SELECT REPLACE ( -14 , 'NbhB#kV"/5AcCP6:aP\'B\'HnQqZB)Z?d`rue{Krdf|f;v?<sup>|S' NOT BETWEEN RTRIM ( ( CONVERT ( t2 . c31 , UNSIGNED ) ) / ASIN ( t0 . c15 ) OR LOCATE ( t2 . c31 , 'C 3{=</sup>:dinZ2]C&nBiGF' , '`y`=H %R=ZN{=)x,_e.rAK%4fJ%D8{G Io>|*
9a34^*Z%q|aP/itd|^W' ) NOT BETWEEN 80 AND 77 ) AND + ROUND ( t2 . c15 <= 109 ) , '_2gx~GcXTg0' ) REGEXP NULLIF ( 16130075208405570 , -16 IS FALSE ) & ATAN ( 32 , -111 ) | DEGREES ( -81 ) = DEGREES ( t2 . c15 ) - UNHEX ( t2 . c31 ) AS c22 FROM t0 CROSS JOIN t0 AS t2 INTERSECT SELECT - ( SQRT ( CONVERT ( -10 , UNSIGNED ) % RAND ( ) - RAND ( -69 ) << + EXISTS ( SELECT 88 AS c22 ) IS NULL ) << 25 ) AS c25 FROM t0 ) ) AS c61 FROM ( SELECT c31 AS c25 FROM t0 ) AS t1 JOIN t0 ON t0 . c15 = t0 . c15 GROUP BY c25 WITH ROLLUP ;

Will trigger Assertion Failed.
GDB info:
#0 0x00007ffff6c0c00b in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1 0x00007ffff6beb859 in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2 0x00007ffff6beb729 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3 0x00007ffff6bfcfd6 in __assert_fail () from /lib/x86_64-linux-gnu/libc.so.6
#4 0x0000555557db5315 in Item_in_subselect::val_int (this=0x6290001a73c0) at /home/wx/mariadb-11.3.0/sql/item_subselect.cc:1936
#5 0x0000555557ba521f in Item::save_int_in_field (this=0x6290001a73c0, field=0x61a0001b6e08, no_conversions=true) at /home/wx/mariadb-11.3.0/sql/item.cc:6843
#6 0x00005555578b2242 in Type_handler_int_result::Item_save_in_field (this=0x55555b7b68c0 <type_handler_bool>, item=0x6290001a73c0, field=0x61a0001b6e08, no_conversions=true) at /home/wx/mariadb-11.3.0/sql/sql_type.cc:4341
#7 0x0000555557ba540b in Item::save_in_field (this=0x6290001a73c0, field=0x61a0001b6e08, no_conversions=true) at /home/wx/mariadb-11.3.0/sql/item.cc:6853
#8 0x0000555556ea7174 in Item_result_field::save_in_result_field (this=0x6290001a73c0, no_conversions=true) at /home/wx/mariadb-11.3.0/sql/item.h:3490
#9 0x00005555573879d1 in copy_funcs (func_ptr=0x621000167880, thd=0x62c0001e0288) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:28843
#10 0x000055555736c428 in end_write (join=0x6290001ac4a8, join_tab=0x62d000023958, end_of_records=false) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:24979
#11 0x00005555573a1a77 in AGGR_OP::put_record (this=0x62d00001c430, end_of_records=false) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:32254
#12 0x00005555573b632d in AGGR_OP::put_record (this=0x62d00001c430) at /home/wx/mariadb-11.3.0/sql/sql_select.h:1180
#13 0x000055555735ec6a in sub_select_postjoin_aggr (join=0x6290001ac4a8, join_tab=0x62d000023958, end_of_records=false) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:23134
#14 0x000055555775be68 in JOIN_CACHE::generate_full_extensions (this=0x62d0000248b0, rec_ptr=0x6140000b92c8 <incomplete sequence \375\200>) at /home/wx/mariadb-11.3.0/sql/sql_join_cache.cc:2511
#15 0x000055555775b6ca in JOIN_CACHE::join_matching_records (this=0x62d0000248b0, skip_last=false) at /home/wx/mariadb-11.3.0/sql/sql_join_cache.cc:2403
#16 0x0000555557759951 in JOIN_CACHE::join_records (this=0x62d0000248b0, skip_last=false) at /home/wx/mariadb-11.3.0/sql/sql_join_cache.cc:2158
#17 0x000055555735ef49 in sub_select_cache (join=0x6290001ac4a8, join_tab=0x62d0000234e0, end_of_records=true) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:23192
#18 0x000055555735f713 in sub_select (join=0x6290001ac4a8, join_tab=0x62d000023068, end_of_records=true) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:23378
#19 0x000055555735dbe3 in do_select (join=0x6290001ac4a8, procedure=0x0) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:22963
#20 0x00005555572dbfe9 in JOIN::exec_inner (this=0x6290001ac4a8) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:4941
#21 0x00005555572d93a0 in JOIN::exec (this=0x6290001ac4a8) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:4718
#22 0x00005555572ddbab in mysql_select (thd=0x62c0001e0288, tables=0x6290001aa200, fields=..., conds=0x0, og_num=1, order=0x0, group=0x6290001a81d0, having=0x0, proc_param=0x0, select_options=2165049856, result=0x6290001ac478, unit=0x62c0001e46d8, select_lex=0x6290001139e0) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:5249
#23 0x00005555572ad18a in handle_select (thd=0x62c0001e0288, lex=0x62c0001e45f8, result=0x6290001ac478, setup_tables_done_option=0) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:628
#24 0x00005555571ce583 in execute_sqlcom_select (thd=0x62c0001e0288, all_tables=0x6290001aa200) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:6013
#25 0x00005555571becf6 in mysql_execute_command (thd=0x62c0001e0288, is_called_from_prepared_stmt=false) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:3912
#26 0x00005555571d95e2 in mysql_parse (thd=0x62c0001e0288, rawbuf=0x6290001132a8 "SELECT AVG ( c25 ) IN ( SELECT c25 AS c14 FROM t0 GROUP BY c25 , c31 HAVING - BIT_LENGTH ( 125 ) % EXISTS ( SELECT REPLACE ( -14 , 'NbhB#kV\"/5AcCP6:aP\\'B
'HnQqZB)Z?d`rue{Krdf|f;v?^|S' NOT BETWEEN RTRI"..., length=868, parser_state=0x7fffd0fde870) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:7734
#27 0x00005555571b1237 in dispatch_command (command=COM_QUERY, thd=0x62c0001e0288, packet=0x6290000ff289 "", packet_length=871, blocking=true) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:1893
#28 0x00005555571adf7c in do_command (thd=0x62c0001e0288, blocking=true) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:1406
#29 0x000055555768e557 in do_handle_one_connection (connect=0x611000050708, put_in_cache=true) at /home/wx/mariadb-11.3.0/sql/sql_connect.cc:1445
#30 0x000055555768deb4 in handle_one_connection (arg=0x611000050708) at /home/wx/mariadb-11.3.0/sql/sql_connect.cc:1347
#31 0x00005555582fa350 in pfs_spawn_thread (arg=0x618000005508) at /home/wx/mariadb-11.3.0/storage/perfschema/pfs.cc:2201
#32 0x00007ffff7115609 in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0
#33 0x00007ffff6ce8133 in clone () from /lib/x86_64-linux-gnu/libc.so.6