The PoC is generated by my DBMS fuzzer. It can also be reproduced in the beta docker image.
```SQL
CREATE TABLE v0 ( v1 DOUBLE PRECISION ) ; 
  INSERT INTO v0 VALUES ( 4 ) ; 
  INSERT INTO v0 VALUES ( 52 ) ; 
  INSERT INTO v0 ( v1 ) SELECT ( SELECT v1 ) FROM ( SELECT 17 + 17399826.000000 AS v7 , 46312780.000000 AS v8 , 'x' AS v6 ) AS v3 , v0 AS v2 , v0 AS v5 , v0 , v0 AS v4 ; 
  SELECT v1 FROM v0 AS v11 , v0 AS v10 , v0 AS v9 NATURAL JOIN v0 WHERE v1 IN ( SELECT v1 FROM v0 AS v13 , v0 AS v12 , v0 AS v14 , v0 ) ORDER BY ( 67 , -128 ) DESC ; 
```

backtrace:
```c
#0 0x7acda2 (qi_inst_state_free+0x52)
#1 0x7ae062 (qi_free+0x372)
#2 0x7adc91 (qi_kill+0x2c1)
#3 0x7d1bf8 (sf_sql_free_stmt+0x448)
#4 0x7d1e66 (sf_sql_free_stmt_w+0x136)
#5 0x7d7a4c (sf_sql_free_stmt_wrapper+0x2c)
#6 0xe214bc (future_wrapper+0x3fc)
#7 0xe28dbe (_thread_boot+0x11e)
#8 0x7f8b31174609 (start_thread+0xd9)
#9 0x7f8b30f44133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba  pkleef/virtuoso-opensource-7
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
Fuzzer: Virtuoso 7.2.11 crashed at `qi_inst_state_free`
This is a GitHub Issue
repo:virtuoso-opensource
owner:openlink
Title : Fuzzer: Virtuoso 7.2.11 crashed at `qi_inst_state_free`
Issue date:

--- start body ---
The PoC is generated by my DBMS fuzzer. It can also be reproduced in the beta docker image.
```SQL
CREATE TABLE v0 ( v1 DOUBLE PRECISION ) ; 
  INSERT INTO v0 VALUES ( 4 ) ; 
  INSERT INTO v0 VALUES ( 52 ) ; 
  INSERT INTO v0 ( v1 ) SELECT ( SELECT v1 ) FROM ( SELECT 17 + 17399826.000000 AS v7 , 46312780.000000 AS v8 , 'x' AS v6 ) AS v3 , v0 AS v2 , v0 AS v5 , v0 , v0 AS v4 ; 
  SELECT v1 FROM v0 AS v11 , v0 AS v10 , v0 AS v9 NATURAL JOIN v0 WHERE v1 IN ( SELECT v1 FROM v0 AS v13 , v0 AS v12 , v0 AS v14 , v0 ) ORDER BY ( 67 , -128 ) DESC ; 
```

backtrace:
```c
#0 0x7acda2 (qi_inst_state_free+0x52)
#1 0x7ae062 (qi_free+0x372)
#2 0x7adc91 (qi_kill+0x2c1)
#3 0x7d1bf8 (sf_sql_free_stmt+0x448)
#4 0x7d1e66 (sf_sql_free_stmt_w+0x136)
#5 0x7d7a4c (sf_sql_free_stmt_wrapper+0x2c)
#6 0xe214bc (future_wrapper+0x3fc)
#7 0xe28dbe (_thread_boot+0x11e)
#8 0x7f8b31174609 (start_thread+0xd9)
#9 0x7f8b30f44133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba  pkleef/virtuoso-opensource-7
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
--- end body ---
