Crash at sub_select_postjoin_aggr

SELECT * FROM ( SELECT 1 x ) x WHERE ( 's%' IN ( WITH x AS ( SELECT 1 ) SELECT x FROM x ORDER BY AVG ( x ) OVER ( PARTITION BY ( AVG ( x ) ) ) ) )

#0 0x6224585ac8ff (_Z24sub_select_postjoin_aggrP4JOINP13st_join_tableb+0x10f)

#1 0x6224585b3a29 (_ZN4JOIN10exec_innerEv+0x1489)

#2 0x6224585b24b6 (_ZN4JOIN4execEv+0x66)

#3 0x622458b5e16b (_ZN30subselect_single_select_engine4execEv+0x5ab)

#4 0x622458b4ec9d (_ZN17Item_in_subselect4execEv+0xbd)

#5 0x622458b5302c (_ZN17Item_in_subselect8val_boolEv+0x6c)

#6 0x622458a3dbcf (_ZN17Item_in_optimizer8val_boolEv+0x1ef)

#7 0x622458a1c5a8 (_ZN15Item_cache_bool11cache_valueEv+0x68)

#8 0x622458471adb (_ZN26select_singlerow_subselect9send_dataER4ListI4ItemE+0xab)

#9 0x62245846e234 (_ZN18select_result_sink20send_data_with_checkER4ListI4ItemEP18st_select_lex_unity+0x74)

#10 0x6224585b3e40 (_ZN4JOIN10exec_innerEv+0x18a0)

#11 0x6224585b24b6 (_ZN4JOIN4execEv+0x66)

#12 0x622458b5e16b (_ZN30subselect_single_select_engine4execEv+0x5ab)

#13 0x622458b4e63a (_ZN14Item_subselect4execEv+0x5a)

#14 0x622458b50ce3 (_ZN24Item_singlerow_subselect11bring_valueEv+0x33)

#15 0x622458aebac2 (_ZN8Item_row11bring_valueEv+0x52)

#16 0x622458a4886e (_ZN6in_row9get_valueEP4Item+0x3e)

#17 0x622458a4d785 (_ZN12Item_func_in8val_boolEv+0x55)

#18 0x6224585b29a9 (_ZN4JOIN10exec_innerEv+0x409)

#19 0x6224585b24b6 (_ZN4JOIN4execEv+0x66)

#20 0x62245857dcd4 (_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x5e4)

#21 0x62245857d635 (_Z13handle_selectP3THDP3LEXP13select_resulty+0x265)

#22 0x62245851dfc8 (_ZL21execute_sqlcom_selectP3THDP10TABLE_LIST+0x698)

#23 0x622458514095 (_Z21mysql_execute_commandP3THDb+0x3f65)

#24 0x622458509485 (_Z11mysql_parseP3THDPcjP12Parser_state+0x345)

#25 0x6224585059d1 (_Z16dispatch_command19enum_server_commandP3THDPcjb+0x16b1)

#26 0x622458509cd1 (_Z10do_commandP3THDb+0x4b1)

#27 0x62245873fb74 (_Z24do_handle_one_connectionP7CONNECTb+0x2a4)

#28 0x62245873f7a3 (handle_one_connection+0xd3)

#29 0x622458e080b4 (pfs_spawn_thread+0x104)

#30 0x7c395d796609 (start_thread+0xd9)

#31 0x7c395d4b8353 (clone+0x43)