/home/runner/work/duckdb-fuzzer-ci/duckdb-fuzzer-ci/src/common/types/value.cpp:1441:16: runtime error: load of value 55, which is not a valid value for type 'bool'

[fuzzerofducks]

Issue found by DuckFuzz on git commit hash 2762f using seed 409583504.

To Reproduce

call dbgen(sf=0.1);
SELECT c2, (c3 < c2), (NOT (8300 OR ((c2 BETWEEN c2 AND c3) IS DISTINCT FROM c2))), (c1 <= 'cef33070-cef5-4b26-9225-ff1990cad3d1') FROM test_all_types(use_large_bignum := -32768, use_large_enum := NULL) AS t4(c1, c2, c3) GROUP BY c1, main.list_value(main.list_value(), main.list_value(42, 999, NULL, NULL, -42), main.list_value()) ORDER BY * ASC NULLS LAST

Error Message

/home/runner/work/duckdb-fuzzer-ci/duckdb-fuzzer-ci/src/common/types/value.cpp:1441:16: runtime error: load of value 55, which is not a valid value for type 'bool'

Stack Trace

[c-herrewijn]

Issue is auto closed, but is not in fact solved. It is reproducible in a ubuntu_x86 container with a duckdb debug build:

DuckDB v1.4.1 (Andium) b390a7c376
Enter ".help" for usage hints.
D call dbgen(sf=0.1);
100% ▕██████████████████████████████████████▏ (00:01:25.92 elapsed)     
┌─────────┐
│ Success │
│ boolean │
├─────────┤
│ 0 rows  │
└─────────┘
D SELECT c2, (c3 < c2), (NOT (8300 OR ((c2 BETWEEN c2 AND c3) IS DISTINCT FROM c2))), (c1 <= 'cef33070-cef5-4b26-9225-ff1990cad3d1') FROM test_all_types(use_large_bignum := -32768, use_large_enum := NULL) AS t4(c1, c2, c3) GROUP BY c1, main.list_value(main.list_value(), main.list_value(42, 999, NULL, NULL, -42), main.list_value()) ORDER BY * ASC NULLS LAST;
/home/runner/work/duckdb-fuzzer-ci/duckdb-fuzzer-ci/src/common/types/value.cpp:1434:16: runtime error: load of value 160, which is not a valid value for type 'bool'

local reproduction:

• spawn a local temporal container
  docker run --rm -it --platform linux/amd64 --name ubuntu_x86 ubuntu:24.04 bash
• copy a duckdb debug build into it (from other terminal)
  • e.g. download and extract it from the artifacts of CIFuzz
  • docker cp ~/Desktop/duckdb ubuntu_x86:/duckdb
• in container, install some runtime dependencies:
  apt update && apt install -y libasan8 libubsan1
• run duckdb in persistent mode (to prevent having to call dbgen(sf=0.1); multiple times, because it might take ~1 minute)
• after call dbgen(sf=0.1); run the select statement multiple times; most often you get a binder error, but sometimes (~25%) you get the runtime error:

SELECT c2, (c3 < c2), (NOT (8300 OR ((c2 BETWEEN c2 AND c3) IS DISTINCT FROM c2))), (c1 <= 'cef33070-cef5-4b26-9225-ff1990cad3d1') FROM test_all_types(use_large_bignum := -32768, use_large_enum := NULL) AS t4(c1, c2, c3) GROUP BY c1, main.list_value(main.list_value(), main.list_value(42, 999, NULL, NULL, -42), main.list_value()) ORDER BY * ASC NULLS LAST;
/home/runner/work/duckdb-fuzzer-ci/duckdb-fuzzer-ci/src/common/types/value.cpp:1441:16: runtime error: load of value 47, which is not a valid value for type 'bool'