<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Issue</th>
<td>
<a href=https://github.com/llvm/llvm-project/issues/61715>61715</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>
[MLIR]`llvm::PointerIntPair` triggers Segmentation fault
</td>
</tr>
<tr>
<th>Labels</th>
<td>
new issue
</td>
</tr>
<tr>
<th>Assignees</th>
<td>
</td>
</tr>
<tr>
<th>Reporter</th>
<td>
BealZephyr
</td>
</tr>
</table>
<pre>
Test with [LLVM 16](https://github.com/llvm/llvm-project/tree/release/16.x)
steps to reproduce:
```
mlir-opt test.mlir -sparse-compiler -test-written-to
```
test case:
```
module {
func.func @collapse_parallel(%arg1: memref<2x32x10x4096xf32>) {
%alloc = memref.alloc() {alignment = 64 : i64} : memref<2x32x10x4096xf32>
memref.copy %arg1, %alloc : memref<2x32x10x4096xf32> to memref<2x32x10x4096xf32>
return
}
}
```
crash trace:
```
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0. Program arguments: /home/ty/fuzzer/llvm-project-16/mlir/build/bin/mlir-opt test.mlir -sparse-compiler -test-written-to
#0 0x0000000000481cad llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) /home/ty/fuzzer/llvm-project-16/llvm/lib/Support/Unix/Signals.inc:567:11
#1 0x000000000048213b PrintStackTraceSignalHandler(void*) /home/ty/fuzzer/llvm-project-16/llvm/lib/Support/Unix/Signals.inc:641:1
#2 0x00000000004804d6 llvm::sys::RunSignalHandlers() /home/ty/fuzzer/llvm-project-16/llvm/lib/Support/Signals.cpp:104:5
#3 0x0000000000482865 SignalHandler(int) /home/ty/fuzzer/llvm-project-16/llvm/lib/Support/Unix/Signals.inc:412:1
#4 0x00007f29d825c980 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x12980)
#5 0x0000000000530f10 llvm::PointerIntPair<llvm::ilist_node_base<true>*, 1u, unsigned int, llvm::PointerLikeTypeTraits<llvm::ilist_node_base<true>*>, llvm::PointerIntPairInfo<llvm::ilist_node_base<true>*, 1u, llvm::PointerLikeTypeTraits<llvm::ilist_node_base<true>*>>>::getPointer() const /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/PointerIntPair.h:60:58
#6 0x0000000000530ef5 llvm::ilist_node_base<true>::getPrev() const /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/ilist_node_base.h:42:38
#7 0x00000000005cc565 llvm::ilist_node_impl<llvm::ilist_detail::node_options<mlir::Block, true, false, void>>::getPrev() const /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/ilist_node.h:71:5
#8 0x00000000005cc52c llvm::ilist_sentinel<llvm::ilist_detail::node_options<mlir::Block, true, false, void>>::empty() const /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/ilist_node.h:249:45
#9 0x00000000005cc465 llvm::simple_ilist<mlir::Block>::empty() const /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/simple_ilist.h:131:38
#10 0x00000000005b6735 mlir::Region::empty() /home/ty/fuzzer/llvm-project-16/mlir/include/mlir/IR/Region.h:60:18
#11 0x0000000003a554a0 mlir::dataflow::AbstractSparseBackwardDataFlowAnalysis::visitOperation(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Analysis/DataFlow/SparseAnalysis.cpp:417:11
#12 0x0000000003a54cc7 mlir::dataflow::AbstractSparseBackwardDataFlowAnalysis::initializeRecursively(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Analysis/DataFlow/SparseAnalysis.cpp:303:25
#13 0x0000000003a54dc4 mlir::dataflow::AbstractSparseBackwardDataFlowAnalysis::initializeRecursively(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Analysis/DataFlow/SparseAnalysis.cpp:310:20
#14 0x0000000003a54dc4 mlir::dataflow::AbstractSparseBackwardDataFlowAnalysis::initializeRecursively(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Analysis/DataFlow/SparseAnalysis.cpp:310:20
#15 0x0000000003a54c8d mlir::dataflow::AbstractSparseBackwardDataFlowAnalysis::initialize(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Analysis/DataFlow/SparseAnalysis.cpp:297:10
#16 0x0000000003a2ef2b mlir::DataFlowSolver::initializeAndRun(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Analysis/DataFlowFramework.cpp:70:25
#17 0x00000000032ddfc0 (anonymous namespace)::TestWrittenToPass::runOnOperation() /home/ty/fuzzer/llvm-project-16/mlir/test/lib/Analysis/DataFlow/TestBackwardDataFlowAnalysis.cpp:108:23
#18 0x0000000003a69757 mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) /home/ty/fuzzer/llvm-project-16/mlir/lib/Pass/Pass.cpp:471:21
#19 0x0000000003a69d6d mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Pass/Pass.cpp:534:16
#20 0x0000000003a6b6ac mlir::PassManager::runPasses(mlir::Operation*, mlir::AnalysisManager) /home/ty/fuzzer/llvm-project-16/mlir/lib/Pass/Pass.cpp:839:10
#21 0x0000000003a6b5d1 mlir::PassManager::run(mlir::Operation*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Pass/Pass.cpp:819:60
#22 0x0000000003a61f32 performActions(llvm::raw_ostream&, bool, bool, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, llvm::function_ref<mlir::LogicalResult (mlir::PassManager&)>, bool, bool) /home/ty/fuzzer/llvm-project-16/mlir/lib/Tools/mlir-opt/MlirOptMain.cpp:91:17
#23 0x0000000003a61b8f processBuffer(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, bool, bool, bool, bool, bool, bool, llvm::function_ref<mlir::LogicalResult (mlir::PassManager&)>, mlir::DialectRegistry&, llvm::ThreadPool*) /home/ty/fuzzer/llvm-project-16/mlir/lib/Tools/mlir-opt/MlirOptMain.cpp:139:12
#24 0x0000000003a61948 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<mlir::LogicalResult (mlir::PassManager&)>, mlir::DialectRegistry&, bool, bool, bool, bool, bool, bool, bool)::$_0::operator()(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) const /home/ty/fuzzer/llvm-project-16/mlir/lib/Tools/mlir-opt/MlirOptMain.cpp:181:12
#25 0x0000000003a6183d mlir::LogicalResult llvm::function_ref<mlir::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<mlir::LogicalResult (mlir::PassManager&)>, mlir::DialectRegistry&, bool, bool, bool, bool, bool, bool, bool)::$_0>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/STLFunctionalExtras.h:45:12
#26 0x0000000003b93a99 llvm::function_ref<mlir::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>::operator()(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) const /home/ty/fuzzer/llvm-project-16/llvm/include/llvm/ADT/STLFunctionalExtras.h:68:12
#27 0x0000000003b93075 mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<mlir::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>, llvm::raw_ostream&, bool, bool) /home/ty/fuzzer/llvm-project-16/mlir/lib/Support/ToolUtilities.cpp:28:12
#28 0x0000000003a60873 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<mlir::LogicalResult (mlir::PassManager&)>, mlir::DialectRegistry&, bool, bool, bool, bool, bool, bool, bool) /home/ty/fuzzer/llvm-project-16/mlir/lib/Tools/mlir-opt/MlirOptMain.cpp:186:10
#29 0x0000000003a60a0f mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::PassPipelineCLParser const&, mlir::DialectRegistry&, bool, bool, bool, bool, bool, bool, bool, bool) /home/ty/fuzzer/llvm-project-16/mlir/lib/Tools/mlir-opt/MlirOptMain.cpp:209:10
#30 0x0000000003a61651 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&, bool) /home/ty/fuzzer/llvm-project-16/mlir/lib/Tools/mlir-opt/MlirOptMain.cpp:306:14
#31 0x0000000000411609 main /home/ty/fuzzer/llvm-project-16/mlir/tools/mlir-opt/mlir-opt.cpp:271:7
#32 0x00007f29d712fc87 __libc_start_main /build/glibc-CVJwZb/glibc-2.27/csu/../csu/libc-start.c:344:0
#33 0x00000000004112ea _start (/home/ty/fuzzer/llvm-project-16/mlir/build/bin/mlir-opt+0x4112ea)
Segmentation fault (core dumped)
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzsWltP47oW_jXmxaJK7FwfeCiX6nAEGgTsfaT9UjmJ0_rg2jm2A2V-_ZGdNDcuA0yZGc3eI9SmibP8fd9ay5c1JlqzlaD0CITHIDw9ILVZS3V0TAn_i1brR3WQyeLx6JZqAx-YWUMQHl9c_HkJ_QiEpwAla2MqDfAcoAVAixUz6zqb5XID0ILz-93XYaXkf2luAFoYRSlAC0U5Jdpe-dFsC1AKvFPgzbWhlYZGQkUrJYs6p9a2e9R-Rl77535uOFOHsjLQUG1m9hc81BVRmh7mclMxThU8tM8OHxQzhopDI581ZNvA3CJ6vT9Z1JxCEB83vyEsa5HP7AcEgZdLzkml6bIiinBOOUAJQCFRKx_gOdzQjaIlwCdoi9HW97aBl0bbEiOAzwBKh2YhtO9xLnMI8Gn75szdcDZdY8LZSmyoMK5NFEDbCYsCEJ_Cb_bXdNQazmX1CHdI0cmw89fNWF-9oRsIoaKmVgLuboD4tFW4uxhLnSui19AoMoyBcZOri7P5zRnUdbZhBhKY1SsbOFIZC-vdocm0rqkGaAGJKCATOa8LCs2awgZLRvI7h2fWdH9jSH4Hi3pTdQC9GfDSKyVXimwgUavaeseCgAAt1nJjA948ArQo669fqZpgOPQjgBY2igFaZDXjhf1mor35sUCHAGEPeluv-xckfk4K6ETAc4Dn-lE3F1eKCeNo3TrdUdI3UuRhKbVRlGwAimyQMGFcIL6Z2U52lgG0uKkr6ymAFn8ItrU32EoQrmdM5ADPwygGeO77PQl_QgL5OIMTxI2NfxFRcIshuZesAGj-eTCjwGb2ACWaoPSCInpO6utajMDqXVp_L8wdvryyYel7gRWzx4enKiZRCKeyfapnAx-NJQtaSHGJ0iJBYZ4mHlwuFdVGKrpUBjptWuvbJFpGwSFnot4erkTdPKjMWlFSzLSceQAde1sfpYnXzSu2m3DEPMRe6XsDz1xJJgxV58JcEaYAPukfMc60WQpZ0GXmpogTo2rqBu25TQS_tp-1cHNp0eTFyVPTF-yO3j5W9FYRZgeFt_ZgP58x1yI9F6X8ANp9omv_bNMVNa29Np5zKbR5fyS1o29_Y356C9BiTH22thno2QBPej9HUz_TMoRvIdMRUPT-U9BPunbwA5sMeAA_HsPP8zB6AT7bVPwZPxXUEMabO66drAyTwrrUTS3uwTGX-Z2NA0cencCScO0u3JA58ejnC-K0iP3xWJU8kQLlT6TQVBgm6A9Qgm4qS_fzdUBBaiNjoEQ6VSIYBYW2oUCXzswz5D6fwBCAo-BjfxDXdvYer0HCLIpxCHuk13TFpHiK893rph5he-P8GqBFY74fMPwBstHCApMwDIg3QFYQQ0ouH5pf80zbNaC5cYuvY5LfPRBVnBJDFlw-zAXhj5q1c_w908x8qagiNuwASnqjg7vvXJ20rJrJsOsPLXYQ7HzrsO2etSuBwB8uqCxvNOEd5Hm8F95MMMMIZ1_pNc1rpdk95Y8_mT72sM2ssKePp_SLPPh96fs26pHX0w_-3vTDJ8GfFHum_5M5o9Ql_IBzNOaMaImyAeedwRvJ76maspmL4rr-UYPYQpENfZDqruUSe5PkHa2SMCqKMvfsNoEIKR43stZQkA3VldvFpg3cW6rNf5rd8a28Irp1mKrFFzEcpT9Exe69v-El2_9LsdNt1xJLFPdEk7HPojQOR4P0YInzpbqVXypLbF6QykjV8Rt5zTFvtgIvuXL4ZIfwkgiyshqcwExK_nTH82H_N4Dc126ucitBNJir0qkMRVS8W4YrVlHOxDQxbdOOXbR3XYYv2a7OhTbKFYakemJ13KDpuXnQYr8iigpjN33NEu77Uu-p9CEObBxGnfTIm0ifRSSfIN5p0AlNtKb6lbHiVSH3yCbB6XgMRP6UTVj432DzGWPeM1D9tFmcdlAn67PILzGCFVWlVJt53uxkXq_Q7QJy961N0W4Y1kTRYlmZcaHjRtYqp5crBfDZLrwmCXF5cX59IoWhW9N6sn-9rIWDtWzKwf1LF3LFcsKvqa65q-Y8L7jtK23LHWPoH9b5VkquB_VTgBaXnKkvlbkkTLTSp66GF_fK46nyWVLCSsmcan1cl6WrbrwmfCd0Ldj_avpE6Eu6kepxZ2rQvqAlqbndunJq6MvvNNvSZ1z8re_P8dZgEcEIp7mx-y1t1GOrR9_rravTXTk035NAb3Ks36Q_6j0bTD2bBskwunsTv4yHf47H3htXbZ42JgEKll5zKd14KdtyIEDJzxBu6r73lz8-EHuJP4m9cBp7CR6uYcZO_IjXfwlpu2pTTjjPSH63LMUI9j85ts8cO7MaSrH6WXo9Ta191RRvbi8WrTMIP9saRXRTMQ8neTXe1mYpJmn6G-TPbzJyfszJUTJxcjx1shcPy8e64szMRXE1WaT92kPIL-HRb7bY22K8_49hO4P-YRhnhtGuXjV1-bT04SUx_mettr955JOXP9Fk5z0t4XjEK39xd45dsyvBnFxcEaWpemGHvE8f_RhfIW9SJcHTmo8fhf6LvmqrXPmaNPWsSVXgxigmVte0fLtMn0sXey40g57u5GiR70deCjeEiQ_UgZ8i2F3u1HbFzb7a0B0ZcudfYh-VeRLD5ZKzLF9qQ5RZ7qDszoSt7LPDkz___fBX1v1EMxQDtMh1DdBiNusu3UNnZ5Zb9kEA8HzgazwljyiBTcftwZt9HFxzh3Ia492pnBu66qqc0KUmhM3RxySXirqjdbTomnen_w6KI1ykOCUH9MiP4jQJcBiFB-sj6sV-jDPqBSjxcBxmRULStAi9LMNpHgYH7Ah5CHsYRX7ooyCchTQuES5zlIVRQosQBB7dEMZnlt5MqtWBOxV4FPmxHx5wklGu3WFZhAR9gO4hQAiEpwfqyEmS1SsNAo8zbXRvxTDD3Snby4vzaxCegsh78ehR5EGj2GpFlYbPSHRQK3708cONjsn_AwAA__8_eaWr">