Server crashes in check_grant / delete_precheck on 2nd execution of SP

CREATE TABLE t1 (a INT);

CREATE TABLE t2 (a INT);

CREATE FUNCTION f1() RETURNS INT RETURN (SELECT COUNT(*) FROM t1, t2);

CREATE VIEW v1 AS SELECT f1();

CREATE PROCEDURE p1() DELETE FROM v1;

--error ER_NON_UPDATABLE_TABLE

CALL p1;

--error ER_NON_UPDATABLE_TABLE

CALL p1;

DROP PROCEDURE p1;

DROP VIEW v1;

DROP FUNCTION f1;

DROP TABLE t1, t2;

#4  <signal handler called>

#5  0x0000556ee177a08e in check_grant (thd=thd@entry=0x62c0000b0218, want_access=want_access@entry=SELECT_ACL, tables=tables@entry=0x625000285860, any_combination_will_do=any_combination_will_do@entry=false, number=number@entry=4294967295, no_errors=no_errors@entry=false) at /data/bld/10.11-asan-ubsan/sql/sql_acl.cc:8478

#6  0x0000556ee1b85993 in check_table_access (thd=thd@entry=0x62c0000b0218, requirements=requirements@entry=SELECT_ACL, tables=0x0, tables@entry=0x625000285860, any_combination_of_privileges_will_do=any_combination_of_privileges_will_do@entry=false, number=number@entry=4294967295, no_errors=no_errors@entry=false) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:7340

#7  0x0000556ee1b866d4 in check_one_table_access (thd=thd@entry=0x62c0000b0218, privilege=privilege@entry=DELETE_ACL, all_tables=all_tables@entry=0x625000265880) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:7161

#8  0x0000556ee1ba1255 in delete_precheck (thd=thd@entry=0x62c0000b0218, tables=0x625000265880) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:9982

#9  0x0000556ee1bc29b0 in mysql_execute_command (thd=0x62c0000b0218, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:4927

#10 0x0000556ee1688afe in sp_instr_stmt::exec_core (this=0x625000265fa8, thd=<optimized out>, nextp=0x7f1b3c282b40) at /data/bld/10.11-asan-ubsan/sql/sp_head.cc:3962

#11 0x0000556ee16c2147 in sp_lex_keeper::reset_lex_and_exec_core (this=this@entry=0x625000265ff0, thd=thd@entry=0x62c0000b0218, nextp=nextp@entry=0x7f1b3c282b40, open_tables=open_tables@entry=false, instr=instr@entry=0x625000265fa8) at /data/bld/10.11-asan-ubsan/sql/sp_head.cc:3673

#12 0x0000556ee16c5706 in sp_instr_stmt::execute (this=0x625000265fa8, thd=0x62c0000b0218, nextp=<optimized out>) at /data/bld/10.11-asan-ubsan/sql/sp_head.cc:3865

#13 0x0000556ee16d64a9 in sp_head::execute (this=this@entry=0x625000264938, thd=thd@entry=0x62c0000b0218, merge_da_on_success=merge_da_on_success@entry=true) at /data/bld/10.11-asan-ubsan/sql/sp_head.cc:1476

#14 0x0000556ee16e044c in sp_head::execute_procedure (this=this@entry=0x625000264938, thd=thd@entry=0x62c0000b0218, args=args@entry=0x62c0000b5648) at /data/bld/10.11-asan-ubsan/sql/sp_head.cc:2497

#15 0x0000556ee1b6e306 in do_execute_sp (thd=thd@entry=0x62c0000b0218, sp=sp@entry=0x625000264938) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:3093

#16 0x0000556ee1b86dc0 in Sql_cmd_call::execute (this=<optimized out>, thd=0x62c0000b0218) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:3356

#17 0x0000556ee1bd377b in mysql_execute_command (thd=thd@entry=0x62c0000b0218, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:6191

#18 0x0000556ee1bd7ee2 in mysql_parse (thd=thd@entry=0x62c0000b0218, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7f1b3c2849f0) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:8211

#19 0x0000556ee1be11b2 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x62c0000b0218, packet=packet@entry=0x62900024e219 "CALL p1", packet_length=packet_length@entry=7, blocking=blocking@entry=true) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:1924

#20 0x0000556ee1bed35d in do_command (thd=thd@entry=0x62c0000b0218, blocking=blocking@entry=true) at /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:1434

#21 0x0000556ee23ec788 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x608000003a38, put_in_cache=put_in_cache@entry=true) at /data/bld/10.11-asan-ubsan/sql/sql_connect.cc:1501

#22 0x0000556ee23ed8e5 in handle_one_connection (arg=0x608000003a38) at /data/bld/10.11-asan-ubsan/sql/sql_connect.cc:1413

#23 0x0000556ee3d428bf in pfs_spawn_thread (arg=0x617000005f18) at /data/bld/10.11-asan-ubsan/storage/perfschema/pfs.cc:2201

#24 0x00007f1b47ca71f5 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442

#25 0x00007f1b47d278ec in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81