2025.12.03 08:21:53.180891 [ 1351 ] {} <Fatal> BaseDaemon: ########## Short fault info ############
2025.12.03 08:21:53.180962 [ 1351 ] {} <Fatal> BaseDaemon: (version 25.12.1.297 (official build), build id: 78D5D0512EFE58016FBA8D827F667466A687B8C9, git hash: 71af582c82ba3a9a06a5b5d13dcb68e2fcfa4787, architecture: x86_64) (from thread 1353) Received signal 11
2025.12.03 08:21:53.180965 [ 1351 ] {} <Fatal> BaseDaemon: Signal description: Segmentation fault
2025.12.03 08:21:53.180971 [ 1351 ] {} <Fatal> BaseDaemon: Address: NULL pointer. Access: read. Address not mapped to object.
2025.12.03 08:21:53.180982 [ 1351 ] {} <Fatal> BaseDaemon: Stack trace: 0x00005f88a20f798c 0x00005f88a20eecfe 0x00005f88a1e45308 0x00005f88a1e3f4db 0x00005f88a1e3e1b6 0x00005f88a1e3d750 0x00005f88a1e94c4a 0x00005f88a2a12186 0x00005f88a2a109f8 0x00005f88a2a134b0 0x00005f88a29985eb 0x00005f88a2d62221 0x00005f88a2d5d4d2 0x00005f88a627222a 0x00005f88a628cea4 0x00005f88ac5941c7 0x00005f88ac5947a5 0x00005f88ac531e7f 0x00005f88ac52f611 0x0000714e36ca3d64 0x0000714e36d373bc
2025.12.03 08:21:53.180985 [ 1351 ] {} <Fatal> BaseDaemon: ########################################
2025.12.03 08:21:53.181061 [ 1351 ] {} <Fatal> BaseDaemon: (version 25.12.1.297 (official build), build id: 78D5D0512EFE58016FBA8D827F667466A687B8C9, git hash: 71af582c82ba3a9a06a5b5d13dcb68e2fcfa4787) (from thread 1353) (query_id: 2795f128-19a4-4f96-9fb1-7188e9e534b6) (query: SELECT 1 WHERE (y -> 1) IN (materialize(1), 1);) Received signal Segmentation fault (11)
2025.12.03 08:21:53.181087 [ 1351 ] {} <Fatal> BaseDaemon: Address: NULL pointer. Access: read. Address not mapped to object.
2025.12.03 08:21:53.181112 [ 1351 ] {} <Fatal> BaseDaemon: Stack trace: 0x00005f88a20f798c 0x00005f88a20eecfe 0x00005f88a1e45308 0x00005f88a1e3f4db 0x00005f88a1e3e1b6 0x00005f88a1e3d750 0x00005f88a1e94c4a 0x00005f88a2a12186 0x00005f88a2a109f8 0x00005f88a2a134b0 0x00005f88a29985eb 0x00005f88a2d62221 0x00005f88a2d5d4d2 0x00005f88a627222a 0x00005f88a628cea4 0x00005f88ac5941c7 0x00005f88ac5947a5 0x00005f88ac531e7f 0x00005f88ac52f611 0x0000714e36ca3d64 0x0000714e36d373bc
2025.12.03 08:21:53.220644 [ 1351 ] {} <Fatal> BaseDaemon: 3. Analyzer/Resolve/resolveFunction.cpp:188: DB::QueryAnalyzer::convertTupleToArray(std::vector<std::shared_ptr<DB::IQueryTreeNode>, std::allocator<std::shared_ptr<DB::IQueryTreeNode>>> const&, std::shared_ptr<DB::IQueryTreeNode> const&, DB::IdentifierResolveScope&) @ 0x000000001ae8198c
2025.12.03 08:21:53.244051 [ 1351 ] {} <Fatal> BaseDaemon: 4. Analyzer/Resolve/resolveFunction.cpp:843: DB::QueryAnalyzer::resolveFunction(std::shared_ptr<DB::IQueryTreeNode>&, DB::IdentifierResolveScope&) @ 0x000000001ae78cfe
2025.12.03 08:21:53.298307 [ 1351 ] {} <Fatal> BaseDaemon: 5. Analyzer/Resolve/QueryAnalyzer.cpp:2890: DB::QueryAnalyzer::resolveExpressionNode(std::shared_ptr<DB::IQueryTreeNode>&, DB::IdentifierResolveScope&, bool, bool, bool) @ 0x000000001abcf308
2025.12.03 08:21:53.354685 [ 1351 ] {} <Fatal> BaseDaemon: 6. Analyzer/Resolve/QueryAnalyzer.cpp:4865: DB::QueryAnalyzer::resolveQuery(std::shared_ptr<DB::IQueryTreeNode> const&, DB::IdentifierResolveScope&) @ 0x000000001abc94db
2025.12.03 08:21:53.404223 [ 1351 ] {} <Fatal> BaseDaemon: 7. Analyzer/Resolve/QueryAnalyzer.cpp:138: DB::QueryAnalyzer::resolve(std::shared_ptr<DB::IQueryTreeNode>&, std::shared_ptr<DB::IQueryTreeNode> const&, std::shared_ptr<DB::Context const>) @ 0x000000001abc81b6
2025.12.03 08:21:53.406171 [ 1351 ] {} <Fatal> BaseDaemon: 8. Analyzer/Resolve/QueryAnalysisPass.cpp:18: DB::QueryAnalysisPass::run(std::shared_ptr<DB::IQueryTreeNode>&, std::shared_ptr<DB::Context const>) @ 0x000000001abc7750
2025.12.03 08:21:53.412415 [ 1351 ] {} <Fatal> BaseDaemon: 9. Analyzer/QueryTreePassManager.cpp:194: DB::QueryTreePassManager::run(std::shared_ptr<DB::IQueryTreeNode>&) @ 0x000000001ac1ec4a
2025.12.03 08:21:53.431925 [ 1351 ] {} <Fatal> BaseDaemon: 10. Interpreters/InterpreterSelectQueryAnalyzer.cpp:165: DB::buildQueryTreeAndRunPasses(std::shared_ptr<DB::IAST> const&, DB::SelectQueryOptions const&, std::shared_ptr<DB::Context const> const&, std::shared_ptr<DB::IStorage> const&) @ 0x000000001b79c186
2025.12.03 08:21:53.447737 [ 1351 ] {} <Fatal> BaseDaemon: 11. Interpreters/InterpreterSelectQueryAnalyzer.cpp:182: DB::InterpreterSelectQueryAnalyzer::InterpreterSelectQueryAnalyzer(std::shared_ptr<DB::IAST> const&, std::shared_ptr<DB::Context const> const&, DB::SelectQueryOptions const&, std::vector<String, std::allocator<String>> const&) @ 0x000000001b79a9f8
2025.12.03 08:21:53.466485 [ 1351 ] {} <Fatal> BaseDaemon: 12. /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/contrib/llvm-project/libcxx/include/__memory/unique_ptr.h:759: std::unique_ptr<DB::InterpreterSelectQueryAnalyzer, std::default_delete<DB::InterpreterSelectQueryAnalyzer>> std::make_unique[abi:se210105]<DB::InterpreterSelectQueryAnalyzer, std::shared_ptr<DB::IAST>&, std::shared_ptr<DB::Context> const&, DB::SelectQueryOptions const&, 0>(std::shared_ptr<DB::IAST>&, std::shared_ptr<DB::Context> const&, DB::SelectQueryOptions const&) @ 0x000000001b79d4b0
2025.12.03 08:21:53.472717 [ 1351 ] {} <Fatal> BaseDaemon: 13.0. inlined from /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/contrib/llvm-project/libcxx/include/__functional/function.h:508: ?
2025.12.03 08:21:53.472745 [ 1351 ] {} <Fatal> BaseDaemon: 13.1. inlined from /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/contrib/llvm-project/libcxx/include/__functional/function.h:772: ?
2025.12.03 08:21:53.472757 [ 1351 ] {} <Fatal> BaseDaemon: 13. Interpreters/InterpreterFactory.cpp:403: DB::InterpreterFactory::get(std::shared_ptr<DB::IAST>&, std::shared_ptr<DB::Context>, DB::SelectQueryOptions const&) @ 0x000000001b7225eb
2025.12.03 08:21:53.512004 [ 1351 ] {} <Fatal> BaseDaemon: 14. Interpreters/executeQuery.cpp:1647: DB::executeQueryImpl(char const*, char const*, std::shared_ptr<DB::Context>, DB::QueryFlags, DB::QueryProcessingStage::Enum, std::unique_ptr<DB::ReadBuffer, std::default_delete<DB::ReadBuffer>>&, std::shared_ptr<DB::IAST>&, std::shared_ptr<DB::ImplicitTransactionControlExecutor>, std::function<void ()>, DB::QueryResultDetails&) @ 0x000000001baec221
2025.12.03 08:21:53.559306 [ 1351 ] {} <Fatal> BaseDaemon: 15. Interpreters/executeQuery.cpp:1937: DB::executeQuery(String const&, std::shared_ptr<DB::Context>, DB::QueryFlags, DB::QueryProcessingStage::Enum) @ 0x000000001bae74d2
2025.12.03 08:21:53.591067 [ 1351 ] {} <Fatal> BaseDaemon: 16. Server/TCPHandler.cpp:765: DB::TCPHandler::runImpl() @ 0x000000001effc22a
2025.12.03 08:21:53.643209 [ 1351 ] {} <Fatal> BaseDaemon: 17. Server/TCPHandler.cpp:2861: DB::TCPHandler::run() @ 0x000000001f016ea4
2025.12.03 08:21:53.646609 [ 1351 ] {} <Fatal> BaseDaemon: 18. /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/base/poco/Net/src/TCPServerConnection.cpp:40: Poco::Net::TCPServerConnection::start() @ 0x000000002531e1c7
2025.12.03 08:21:53.650640 [ 1351 ] {} <Fatal> BaseDaemon: 19. /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/base/poco/Net/src/TCPServerDispatcher.cpp:115: Poco::Net::TCPServerDispatcher::run() @ 0x000000002531e7a5
2025.12.03 08:21:53.654593 [ 1351 ] {} <Fatal> BaseDaemon: 20. /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/base/poco/Foundation/src/ThreadPool.cpp:205: Poco::PooledThread::run() @ 0x00000000252bbe7f
2025.12.03 08:21:53.658461 [ 1351 ] {} <Fatal> BaseDaemon: 21. /home/ubuntu/actions-runner/_work/ClickHouse/ClickHouse/base/poco/Foundation/src/Thread_POSIX.cpp:341: Poco::ThreadImpl::runnableEntry(void*) @ 0x00000000252b9611
2025.12.03 08:21:53.658501 [ 1351 ] {} <Fatal> BaseDaemon: 22. ? @ 0x00000000000a3d64
2025.12.03 08:21:53.658522 [ 1351 ] {} <Fatal> BaseDaemon: 23. __clone3 @ 0x00000000001373bc
2025.12.03 08:21:53.658548 [ 1351 ] {} <Fatal> BaseDaemon: Integrity check of the executable skipped because the reference checksum could not be read.
2025.12.03 08:21:53.658674 [ 1351 ] {} <Fatal> BaseDaemon: Report this error to https://github.com/ClickHouse/ClickHouse/issues
2025.12.03 08:21:53.658877 [ 1351 ] {} <Fatal> BaseDaemon: Changed settings: s3_truncate_on_insert = true, azure_truncate_on_insert = true, allow_suspicious_low_cardinality_types = true, allow_suspicious_fixed_string_types = true, allow_suspicious_indices = true, allow_suspicious_ttl_expressions = true, allow_suspicious_variant_types = true, allow_suspicious_primary_key = true, allow_suspicious_types_in_group_by = true, allow_suspicious_types_in_order_by = true, enable_positional_arguments = true, allow_nonconst_timezone_arguments = true, enable_time_time64_type = true, allow_nondeterministic_optimize_skip_unused_shards = true, use_skip_indexes = true, use_skip_indexes_on_data_read = true, allow_distributed_ddl = true, allow_suspicious_codecs = true, enable_zstd_qat_codec = true, enable_deflate_qpl_codec = true, max_execution_time = 60., allow_custom_error_code_in_throwif = true, allow_ddl = true, allow_introspection_functions = true, allow_drop_detached = true, enable_lightweight_delete = true, allow_materialized_view_with_bad_select = true, allow_settings_after_format_in_insert = true, allow_nondeterministic_mutations = true, allow_non_metadata_alters = true, optimize_use_projections = true, optimize_use_projection_filtering = true, enable_lightweight_update = true, use_query_condition_cache = false, allow_experimental_kafka_offsets_storage_in_keeper = true, engine_file_truncate_on_insert = true, database_replicated_allow_replicated_engine_arguments = 1, allow_experimental_correlated_subqueries = true, query_plan_optimize_lazy_materialization = true, query_plan_max_limit_for_lazy_materialization = 0, keeper_max_retries = 15, enable_order_by_all = true, allow_named_collection_override_by_default = true, allow_experimental_delta_lake_writes = true, cluster_for_parallel_replicas = 'cluster0', parallel_replicas_for_non_replicated_merge_tree = true, allow_experimental_database_iceberg = true, allow_experimental_database_unity_catalog = true, allow_experimental_database_glue_catalog = true, allow_experimental_analyzer = true, allow_experimental_materialized_postgresql_table = true, allow_experimental_funnel_functions = true, allow_experimental_nlp_functions = true, allow_experimental_hash_functions = true, allow_experimental_time_series_table = true, allow_experimental_codecs = true, allow_experimental_join_right_table_sorting = true, allow_experimental_statistics = true, allow_experimental_full_text_index = true, allow_experimental_database_materialized_postgresql = true, allow_experimental_qbit_type = true, allow_experimental_database_hms_catalog = true, allow_experimental_insert_into_iceberg = true, allow_experimental_iceberg_compaction = true, allow_experimental_bfloat16_type = true, allow_experimental_inverted_index = true, allow_experimental_vector_similarity_index = true, allow_experimental_join_condition = true, allow_experimental_variant_type = true, allow_experimental_dynamic_type = true, allow_experimental_json_type = true, allow_experimental_live_view = true, allow_experimental_shared_set_join = true, allow_experimental_object_type = true, type_json_skip_duplicated_paths = true, input_format_parquet_allow_geoparquet_parser = true
Describe the bug
Seen here: https://s3.amazonaws.com/clickhouse-test-reports/json.html?REF=master&sha=7f36330364ab1efcd901afbb6d4ae041a6271a5a&name_0=MasterCI&name_1=AST+fuzzer+%28arm_asan%29 Time to bisect...
How to reproduce
Run Fiddle: https://fiddle.clickhouse.com/44390e98-dac2-4614-98f3-563713da5677
Error message and/or stacktrace
Stack trace: