Thanks for your confirmation and the fix, Richard. Also thanks for your detailed explanation on the triggering condition. This bug is indeed hard to trigger, and we got this query from our fuzzer which randomly mutates statements and clauses while trying to retain the query validity.