Assertion `(mem_root->flags & 4) == 0' failed in Item_exists_subselect::select_prepare_to_be_in

CREATE TABLE t (f INT);

INSERT INTO t VALUES (1),(2); # Optional, fails either way

CREATE PROCEDURE pr() UPDATE t SET f = 3 WHERE EXISTS (SELECT 1);

SET optimizer_switch='exists_to_in=off';

CALL pr;

SET optimizer_switch='exists_to_in=on';

CALL pr;

# Cleanup

DROP PROCEDURE pr;

DROP TABLE t;

mariadbd: /data/bld/11.2-asan/mysys/my_alloc.c:275: alloc_root: Assertion `(mem_root->flags & 4) == 0' failed.

241014  2:21:48 [ERROR] mysqld got signal 6 ;

#9  0x00007f8ff7853e32 in __GI___assert_fail (assertion=0x55c8896215a0 "(mem_root->flags & 4) == 0", file=0x55c8896210a0 "/data/bld/11.2-asan/mysys/my_alloc.c", line=275, function=0x55c889621a80 <__PRETTY_FUNCTION__.1> "alloc_root") at ./assert/assert.c:101

#10 0x000055c888210761 in alloc_root (mem_root=0x6250001811e0, length=208) at /data/bld/11.2-asan/mysys/my_alloc.c:275

#11 0x000055c885fe91a6 in Item::operator new (size=208, mem_root=0x6250001811e0) at /data/bld/11.2-asan/sql/item.h:862

#12 0x000055c886fab143 in Item_exists_subselect::select_prepare_to_be_in (this=0x625000185688) at /data/bld/11.2-asan/sql/item_subselect.cc:2984

#13 0x000055c886fa94e6 in Item_exists_subselect::select_transformer (this=0x625000185688, join=0x625000193320) at /data/bld/11.2-asan/sql/item_subselect.cc:2797

#14 0x000055c88696afd3 in check_and_do_in_subquery_rewrites (join=0x625000193320) at /data/bld/11.2-asan/sql/opt_subselect.cc:802

#15 0x000055c886492f4e in JOIN::prepare (this=0x625000193320, tables_init=0x0, conds_init=0x0, og_num=0, order_init=0x0, skip_order_by=false, group_init=0x0, having_init=0x0, proc_param_init=0x0, select_lex_arg=0x625000182b48, unit_arg=0x625000186138) at /data/bld/11.2-asan/sql/sql_select.cc:1685

#16 0x000055c886fb5a5c in subselect_single_select_engine::prepare (this=0x625000185840, thd=0x62c0000c0218) at /data/bld/11.2-asan/sql/item_subselect.cc:3985

#17 0x000055c886f8eeb0 in Item_subselect::fix_fields (this=0x625000185688, thd_param=0x62c0000c0218, ref=0x625000192fd0) at /data/bld/11.2-asan/sql/item_subselect.cc:298

#18 0x000055c886fb19e0 in Item_exists_subselect::fix_fields (this=0x625000185688, thd=0x62c0000c0218, ref=0x625000192fd0) at /data/bld/11.2-asan/sql/item_subselect.cc:3558

#19 0x000055c8860e4d11 in Item::fix_fields_if_needed (this=0x625000185688, thd=0x62c0000c0218, ref=0x625000192fd0) at /data/bld/11.2-asan/sql/item.h:1167

#20 0x000055c8860e4d47 in Item::fix_fields_if_needed_for_scalar (this=0x625000185688, thd=0x62c0000c0218, ref=0x625000192fd0) at /data/bld/11.2-asan/sql/item.h:1176

#21 0x000055c8862118b9 in Item::fix_fields_if_needed_for_bool (this=0x625000185688, thd=0x62c0000c0218, ref=0x625000192fd0) at /data/bld/11.2-asan/sql/item.h:1180

#22 0x000055c886208370 in setup_conds (thd=0x62c0000c0218, tables=0x6250001821b0, leaves=..., conds=0x625000192fd0) at /data/bld/11.2-asan/sql/sql_base.cc:8940

#23 0x000055c886489d41 in setup_without_group (thd=0x62c0000c0218, ref_pointer_array=..., tables=0x6250001821b0, leaves=..., fields=..., all_fields=..., conds=0x625000192fd0, order=0x0, group=0x0, win_specs=..., win_funcs=..., hidden_group_fields=0x625000192e97) at /data/bld/11.2-asan/sql/sql_select.cc:964

#24 0x000055c886491b9b in JOIN::prepare (this=0x625000192b38, tables_init=0x6250001821b0, conds_init=0x625000185688, og_num=0, order_init=0x0, skip_order_by=false, group_init=0x0, having_init=0x0, proc_param_init=0x0, select_lex_arg=0x625000184250, unit_arg=0x625000183a18) at /data/bld/11.2-asan/sql/sql_select.cc:1586

#25 0x000055c886743c6c in Sql_cmd_update::prepare_inner (this=0x625000182af0, thd=0x62c0000c0218) at /data/bld/11.2-asan/sql/sql_update.cc:3036

#26 0x000055c8865860c6 in Sql_cmd_dml::prepare (this=0x625000182af0, thd=0x62c0000c0218) at /data/bld/11.2-asan/sql/sql_select.cc:34183

#27 0x000055c886586396 in Sql_cmd_dml::execute (this=0x625000182af0, thd=0x62c0000c0218) at /data/bld/11.2-asan/sql/sql_select.cc:34236

#28 0x000055c88639f91d in mysql_execute_command (thd=0x62c0000c0218, is_called_from_prepared_stmt=false) at /data/bld/11.2-asan/sql/sql_parse.cc:4433

#29 0x000055c886a652e1 in sp_instr_stmt::exec_core (this=0x625000186978, thd=0x62c0000c0218, nextp=0x7f8fecdd6b20) at /data/bld/11.2-asan/sql/sp_instr.cc:1050

#30 0x000055c886a60e99 in sp_lex_keeper::reset_lex_and_exec_core (this=0x6250001869b0, thd=0x62c0000c0218, nextp=0x7f8fecdd6b20, open_tables=false, instr=0x625000186978, rerun_the_same_instr=false) at /data/bld/11.2-asan/sql/sp_instr.cc:296

#31 0x000055c886a6208d in sp_lex_keeper::validate_lex_and_exec_core (this=0x6250001869b0, thd=0x62c0000c0218, nextp=0x7f8fecdd6b20, open_tables=false, instr=0x625000186978) at /data/bld/11.2-asan/sql/sp_instr.cc:475

#32 0x000055c886a64a60 in sp_instr_stmt::execute (this=0x625000186978, thd=0x62c0000c0218, nextp=0x7f8fecdd6b20) at /data/bld/11.2-asan/sql/sp_instr.cc:953

#33 0x000055c88612dd17 in sp_head::execute (this=0x6250001811a0, thd=0x62c0000c0218, merge_da_on_success=true) at /data/bld/11.2-asan/sql/sp_head.cc:1284

#34 0x000055c886134042 in sp_head::execute_procedure (this=0x6250001811a0, thd=0x62c0000c0218, args=0x62c0000c56c8) at /data/bld/11.2-asan/sql/sp_head.cc:2300

#35 0x000055c88639612a in do_execute_sp (thd=0x62c0000c0218, sp=0x6250001811a0) at /data/bld/11.2-asan/sql/sql_parse.cc:3064

#36 0x000055c886397ca4 in Sql_cmd_call::execute (this=0x6290000e6300, thd=0x62c0000c0218) at /data/bld/11.2-asan/sql/sql_parse.cc:3309

#37 0x000055c8863aa769 in mysql_execute_command (thd=0x62c0000c0218, is_called_from_prepared_stmt=false) at /data/bld/11.2-asan/sql/sql_parse.cc:5892

#38 0x000055c8863b7422 in mysql_parse (thd=0x62c0000c0218, rawbuf=0x6290000e6238 "CALL pr", length=7, parser_state=0x7f8fecdd8a30) at /data/bld/11.2-asan/sql/sql_parse.cc:7938

#39 0x000055c88638f024 in dispatch_command (command=COM_QUERY, thd=0x62c0000c0218, packet=0x629000249219 "CALL pr", packet_length=7, blocking=true) at /data/bld/11.2-asan/sql/sql_parse.cc:1894

#40 0x000055c88638bd61 in do_command (thd=0x62c0000c0218, blocking=true) at /data/bld/11.2-asan/sql/sql_parse.cc:1407

#41 0x000055c886867062 in do_handle_one_connection (connect=0x608000003638, put_in_cache=true) at /data/bld/11.2-asan/sql/sql_connect.cc:1439

#42 0x000055c886866a1e in handle_one_connection (arg=0x6080000035b8) at /data/bld/11.2-asan/sql/sql_connect.cc:1341

#43 0x000055c8874c8fee in pfs_spawn_thread (arg=0x617000005b98) at /data/bld/11.2-asan/storage/perfschema/pfs.cc:2201

#44 0x00007f8ff78a8044 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442

#45 0x00007f8ff792861c in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81