<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/58552>58552</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            clang crashes on valid code at -Os: Assertion `TrueVal->getType() == FalseVal->getType() && "Select must have same types for true/false ops"' failed 
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            new issue
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          zhendongsu
      </td>
    </tr>
</table>

<pre>
    It affects both trunk and 15.0.0, but not 14.0.0. 

Compiler Explorer: https://godbolt.org/z/so4fGeW9T

```
[559] % clangtk -v
clang version 16.0.0 (https://github.com/llvm/llvm-project.git c9447c62966e5ec60ec277e4a7d75420224f53f6)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/opfuzz/bin
Found candidate GCC installation: /usr/lib/gcc/i686-linux-gnu/8
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/10
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/6
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/6.5.0
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7.5.0
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/8
Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Candidate multilib: .;@m64
Selected multilib: .;@m64
[560] % 
[560] % clangtk -O1 small.c; ./a.out
[561] % 
[561] % clangtk -Os small.c
clang-16: /local/suz-local/software/clangbuild/llvm-project/llvm/lib/Analysis/InstructionSimplify.cpp:4489: llvm::Value* simplifySelectInst(llvm::Value*, llvm::Value*, llvm::Value*, const llvm::SimplifyQuery&, unsigned int): Assertion `TrueVal->getType() == FalseVal->getType() && "Select must have same types for true/false ops"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: /local/suz-local/software/local/clang-trunk/bin/clang-16 -cc1 -triple x86_64-unknown-linux-gnu -emit-obj --mrelax-relocations -disable-free -clear-ast-before-backend -main-file-name small.c -mrelocation-model pic -pic-level 2 -pic-is-pie -mframe-pointer=none -fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -mllvm -treat-scalable-fixed-error-as-warning -debugger-tuning=gdb -fcoverage-compilation-dir=/local/suz-local/software/emitesting/bugs/20221022-clangtk-m64-Os-Weverything-pipe-fPIC-build-225841/delta -resource-dir /local/suz-local/software/local/clang-trunk/lib/clang/16.0.0 -I /usr/local/include/csmith -I /local/suz-local/software/local/include -internal-isystem /local/suz-local/software/local/clang-trunk/lib/clang/16.0.0/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/11/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -Os -fdebug-compilation-dir=/local/suz-local/software/emitesting/bugs/20221022-clangtk-m64-Os-Weverything-pipe-fPIC-build-225841/delta -ferror-limit 19 -fgnuc-version=4.2.1 -fcolor-diagnostics -vectorize-loops -vectorize-slp -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/small-b62167.o -x c small.c
1.      <eof> parser at end of file
2.      Optimizer
 #0 0x000055954d049e71 PrintStackTraceSignalHandler(void*) Signals.cpp:0:0
 #1 0x000055954d047564 SignalHandler(int) Signals.cpp:0:0
 #2 0x00007f06bf614980 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x12980)
 #3 0x00007f06be241e87 raise /build/glibc-CVJwZb/glibc-2.27/signal/../sysdeps/unix/sysv/linux/raise.c:51:0
 #4 0x00007f06be2437f1 abort /build/glibc-CVJwZb/glibc-2.27/stdlib/abort.c:81:0
 #5 0x00007f06be2333fa __assert_fail_base /build/glibc-CVJwZb/glibc-2.27/assert/assert.c:89:0
 #6 0x00007f06be233472 (/lib/x86_64-linux-gnu/libc.so.6+0x30472)
 #7 0x000055954be6f64c simplifySelectInst(llvm::Value*, llvm::Value*, llvm::Value*, llvm::SimplifyQuery const&, unsigned int) InstructionSimplify.cpp:0:0
 #8 0x000055954cac41a5 llvm::InstCombinerImpl::visitSelectInst(llvm::SelectInst&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x39691a5)
 #9 0x000055954c9e89fb llvm::InstCombinerImpl::run() (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x388d9fb)
#10 0x000055954c9ea87c combineInstructionsOverFunction(llvm::Function&, llvm::InstructionWorklist&, llvm::AAResults*, llvm::AssumptionCache&, llvm::TargetLibraryInfo&, llvm::TargetTransformInfo&, llvm::DominatorTree&, llvm::OptimizationRemarkEmitter&, llvm::BlockFrequencyInfo*, llvm::ProfileSummaryInfo*, unsigned int, llvm::LoopInfo*) InstructionCombining.cpp:0:0
#11 0x000055954c9eb497 llvm::InstCombinePass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x3890497)
#12 0x000055954d3f3282 llvm::detail::PassModel<llvm::Function, llvm::InstCombinePass, llvm::PreservedAnalyses, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x4298282)
#13 0x000055954a81455e llvm::detail::PassModel<llvm::Function, llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>, llvm::PreservedAnalyses, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x16b955e)
#14 0x000055954c7c0565 llvm::ModuleToFunctionPassAdaptor::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x3665565)
#15 0x000055954a7fad32 llvm::detail::PassModel<llvm::Module, llvm::ModuleToFunctionPassAdaptor, llvm::PreservedAnalyses, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x169fd32)
#16 0x000055954c7be771 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x3663771)
#17 0x000055954d404a70 (anonymous namespace)::EmitAssemblyHelper::RunOptimizationPipeline(clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>&, std::unique_ptr<llvm::ToolOutputFile, std::default_delete<llvm::ToolOutputFile>>&) BackendUtil.cpp:0:0
#18 0x000055954d407036 clang::EmitBackendOutput(clang::DiagnosticsEngine&, clang::HeaderSearchOptions const&, clang::CodeGenOptions const&, clang::TargetOptions const&, clang::LangOptions const&, llvm::StringRef, llvm::Module*, clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x42ac036)
#19 0x000055954e3165d2 clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x51bb5d2)
#20 0x000055954efdbaa9 clang::ParseAST(clang::Sema&, bool, bool) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x5e80aa9)
#21 0x000055954dbc3271 clang::FrontendAction::Execute() (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x4a68271)
#22 0x000055954db4a43e clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x49ef43e)
#23 0x000055954dc8b0d8 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x4b300d8)
#24 0x000055954a4a797d cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x134c97d)
#25 0x000055954a4a14d4 ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&) driver.cpp:0:0
#26 0x000055954a4a3fb6 clang_main(int, char**) (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x1348fb6)
#27 0x00007f06be224c87 __libc_start_main /build/glibc-CVJwZb/glibc-2.27/csu/../csu/libc-start.c:344:0
#28 0x000055954a4a06ca _start (/local/suz-local/software/local/clang-trunk/bin/clang-16+0x13456ca)
clang-16: error: unable to execute command: Aborted
clang-16: error: clang frontend command failed due to signal (use -v to see invocation)
clang version 16.0.0 (https://github.com/llvm/llvm-project.git c9447c62966e5ec60ec277e4a7d75420224f53f6)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/opfuzz/bin
clang-16: note: diagnostic msg: 
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang-16: note: diagnostic msg: /tmp/small-b7adae.c
clang-16: note: diagnostic msg: /tmp/small-b7adae.sh
clang-16: note: diagnostic msg: 

********************
[562] % 
[562] % cat small.c
int a, b, c;
static int d = -1;
void f() {
  int e;
  for (c = 0; c < 3; c++)
    if (!a || d > c)
      b |= e;
  int *g[2] = {&d, &d};
}
int main() {
  if (a)
    f();
  return 0;
}
```

</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzlWtty2zgS_Rr5BUUV75cHPyiynXgrs_bGmqRqX1QgCUqc8LYg6dj5-j0NUDIpy7GTsatmd1yyRIJAX043uhsg4jq9P73sGM8ykXQti-tuyzrZV18Zr1JmeXNzbs7sJYv7jlV1xyyXWuZsZp7NzIX-XtZlkxdCsvO7pqilkDNnwbZd17S4mNkX-GzqNK6Lbl7LDe6-47-t3ey9-BKtxpRmvjl89K33zvOimXfGZrbHkoJXm-4rM271U3XPboVs87pilk-CoWN4wDnvtn08T-oSN0Vxu_sxGln_AZ3n6MCSyHWDxLcj3xeeSHxTJHYQCJcHaeC5tmnbbuY5mT-zI817xeVGdKTnXeivfdcAYlX9rTKKvOrvjE3VD_22UvCUlXUqCurd1G1-px9dVm3Hi0KkZ7kCjOSqE14QNv13Y3ddN1n_nQCL80oPvKh7mCaBffKUd4K9Xy5ZronxDlAMxPpWEsk8JhCSBN-5H_ojAe2L8E8SHHQfk7TMN6BpvT5N_w1IzjFbXp9s8AYk30bSwZ1uRIF5JdJXsflyL1nZF11Oo0BlPnPezVyz9N0Dlj_qRNEEkWWIJsfa9hHmymJtCbHnCWiAkH3B53XfjcZYR-hYj-m0ezoPIcuw_B_M97bOum9cClyq3nGfF-lBzBpFMoXiouLFfZu3uKSoIvuE4L7Jy6bIs_t50jRg6LphRHzVSERHZ_GZFz34LFg79NQwEgmE0cf9KA_8TGtSg9Lo2U6gf_VC3s9sn_r0VZtvKlgurzqKrhBw0bZCkgIMiWAlewGaxsw5R8Bd3TcgHqIjmzln-LALXrRPdCAGPn5srRZ8A9Js-a1gLS8F69C1ZVktKd8R3BmRYjVyh23P7IBlHEktnWvLXX88X9ycs7aPS-QLjny4YVI0texYVx8mu2dSDoXitu0F2Uul2bxKij6FSFvBEsnbLYt58rWTPBGEUQNGsk4EcElZW_dSN9NI3rZ1knNyfSRt1iYyb7pB5JsORFjal2R93WTiUXQt643kJUMK60tRde3LvHHXpH1Y1QhDVtq1WT4zksRieJg3hXgyNTJDAESjjv9ghlFKUfA7A9-gT1ZvmZHmLY8LYWRSCJAsBJcGbzsjFjCXMAgcAeWNkueVkcFKRkUWHaYaUzQHaoZKvazJ0YwvoxC3uLX1Td7iBxzKDHgIo6nhhFS9nFV1heas5N3WEFJWNW6yxoBDk1GQ98_gnUZW1Yak-JlDeeoLSsrnaQLWELnIeQsfM7K--pZXqdGRVoD7DPw7VUEYSdMTTobvoqmvhGrYiEpIkrgktyE8Be-MFvhrWPI7kZJcxKM1YJ8KEgA2Aa_cCEmE0AA-mzQG96RGkcQ3oK0KNY1LSlXH2fNmJ1OJtiN6sHa_IaelgsjCvzEEOgMxFrHO-AJw5X23JTyavIGk15dLQ0Uww7a90LUwGOboOIPBtSeTIL_sfTr8qTbKGboENC5HWWYYNsww6txCoe3Q6YVMd_PTUP6BYAvPuW87Ub6q4M8xOqrRD7s-m2Lti_n88deRvo-5iTu6SB5zfYD6kM6PR_88C5VfjUy5_V_KtzM9N4uccoUVoQHaJ8awVIFo7tyeW2pmYr0EcfmmqiFHAnVuBcWO_LuAwMhF44a2aDCGpynIYLqfrdeosNYfFp_P12dfFp8u7PXy4nK9uPkNHEC9JsA6RH_oTJHRiH3b8oM5gtkdS6aFiUWJYeYsRZ0hkbKGS-RgxjtGcbbOGAVZ3dOmnldNB92-I1aqNjByTGbemfjDgs1zU9ONRGCxawljqjy0omR2g1TPiw9IXFgtIk3f1nmqaoWI6UftUKuY6n9P2zqgHXgIl4fEdAHxY0L2QCjITD_OfMuNQpOt14hFgFiskcxV8TDMnCPzAA-aTq3p5m1NU_adeWfZoLJfGRIbZ8xG2K4lwoBJnqO8UI6mK7oNiCXG8vM_vv073t_aczsggyktdhMS_p8KqksuENjvdMOtkgaS4VeRplp14VlThd0DSZwgsxiPa6XpyyTpUo2GGqWYhAdMvCkTx3EyDlS5quPWVEatY_5y3fW4_YVmGU1Z-ocs3cB-ge0SspqvrObAjeyJ1YKxl8XCz3w3eavS-ImiWJfMx0tj9nRpf-Dl4ViRhCeuxb0RR6KzrEtUbkJego5uvc3bvHtCy3Gzr2vr8HUKRm2KyI8g4sQY0USHSIRRFj-rA1jsi_9XFTAMU_DfC0ghyTwQkIdBAvMpkUaWaq8Q9TFt1c0E1IdGf-oRo9Ffavm1yPce8dBnsfgkWqx120f-hNUTKn4avOTJVjwaqXeuPuax5PL-ssrqJ3ogYFctyu3yaJ-zuswrjqC5Qon-6OmQHlQy_iRKLr-eIxNSaX3Y8x1s8PVCiv_0okoGcQ4UwnKFss9NX5Z7iReP58d4yEdkzn3HycTRPoMc_njmkFGtA6PGbhQc97prBKex073ArrtV-m-8QjGOCmV5ZJBz_jZTLIyQkoOJB9uTrOpkjh3aI3FT0SFyDzaAtr_pPcxjQj9y3zFIB8YUiOm3ItVgiPbXIKLP_wz2LuoDQDvB3hljz0PL9TzxCtirvj9S8VfR_tsb0fLjCDaaGNGdRIsgMT1_nGdhtL4Qq3onGhlnkfIGUfO44nrAT6k9DHmrqOH7HnSaKO1NPDfAcsT5uaix03L5Qqhey_UeoHrK8f5y-Ft-lAHeCf7-1OliEWCd9XwEOIb6_xla8FYHYEzQmtT0qWvCY9U7Ql7V1X1Z9y2jncO2UTutkZaSahXagy7j4v6DKBoxTNdPfTUubK7zRmB5QdvNeh9HFzR6b3KxD7dYP-knWLqhylk33RQTyb-tm28y78S6pX2-cjIoFRlHmbfGJBKdeGbgEKr9l7Bd1XVx1XdN313k2i9ewvNg1APDiA2K_97lxfHaKjwwRWBiFTdCjmAfiGgWU2DPHjZJzquNwl0pOuryActyIW8El8n2qtF7yeMF1ajrEmHpvaie6aUr4Wc6fcTVsS6j5VMnUXF-EtmxoLd7V_KXcqHXL4F4AnNPpuZkhScQ2LzUPgLDEpD25W4O6u0etTbRe32_V_mBoyxuVhjTibu3Wax6VhxD0rEq9mQtKLI05jwaq3JN22mQayroDVZGg6_EmFcPv68usghNSDQRebqlFieOjTQyEu5CEoZ7L9Qz9E4kfSfeZIntcj-0p8Hbni5QYpe7jphOYn3uRJ2kqBDBx1Lupk_4tFJvUuxHIoOYEz0mxX6ahLGZhpPIpyV-UOd2eHk1lf6Runp1-8ryx44J8SbyT-pcjhQaBSlLEmtN798mNcFCSn5Pgc5ZJlsud_FwMSwhpm1oGG0Av3Ll5GD5HqQTNbwDNSxkIbbDfmmt1Nwb73rRBvlntfuut5iO6KQ8KJX5rZBHs57tHzB1snjIejv0ht0Loq2geBs0QvCdoBFMd1BtNwkDtl7TJimSAZedku-le7ZJSzusarNaX6qHio7av3Vcd4pLeICL6Secacavr7wH4nvlx2cw1HsauugrerNKr_KFdgjayiuRbOjhgna-RfqD4fooWjaEl93Y4QQBS3tFWe_pk3Z9K5hxq9qEYPlovo9l_BsebRuDW9VUrSzYw9sxVrYbRW7woj_xGZ05HE52LFarxfIDW304ZxdXHz9efbn853t2cfnx_IatrlTzu9_fs0_n11efVrPdeYrrYyczwpZm8JOnM_YdpGDqlAKe8m5P8oUQHLzZC3jKxbFTRj9Lot3-giVeyx50iMo-crBq3wa0pu8tETwZV5WTiqF04ku1w_9ITHqc0lEhZlj7Z5R0WLarYoKhlanOYt-LqaNBlIHVeJMOgtHlkjnqErFFfXbvLPCXZzp0WRxkl_go3ufUd9SLsVg9BtExN-IOJDZQWKuL5ySc7aekmvoNzvYD6HqPwJBJDvVR4vAJ80HtEV8pul5WSr8DygeHcU_EqeX7vmeaduSepKdOGjkRP-nyrhCnOmCps0uiZYhZt7zIKRCmgt4iG1fqkNFf62QXO-llcfrrR7e80PPsk-1pZMdRknhhkLh-Ggehafpm5vpJ5PAEaDknBY9F0Z7CsuBfiW9MkSBZvLOT_HQ4ceCYrut67tx0HC8VpjBNy7d8N5i5JhYKWFWTHHSA-kSeKpHUgQXXpPdD7cNDxBx6KyIUO9Dnfbet5en3LRJTXW3a_kRxP1XS_xfRAy26">