<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/63380>63380</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [SCCP] SCCP pass replaces vector with scalar constant, causing either crash or miscompilation
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          Benjins
      </td>
    </tr>
</table>

<pre>
    SCCP is sometimes able to reduce vector expressions to a constant. However, when it does this replacement, it does so using the scalar element type, instead of the vector type

[Minimal repro](https://godbolt.org/z/s6qcf3vPW) (this causes a crash with assertions when trying to replace `<4 x i32>` with an `i32`):

```llvm
define dso_local <4 x i32> @do_stuff(<4 x i32> %input) local_unnamed_addr {

  %ctlz.1 = tail call <4 x i32> @llvm.ctlz.v4i32(<4 x i32> %input, i1 false)
  %ctlz.2 = tail call <4 x i32> @llvm.ctlz.v4i32(<4 x i32> %ctlz.1, i1 true)
  %ctlz.3 = tail call <4 x i32> @llvm.ctlz.v4i32(<4 x i32> %ctlz.2, i1 true)

  ret <4 x i32> %ctlz.3
}

declare <4 x i32> @llvm.ctlz.v4i32(<4 x i32>, i1 immarg) #0
attributes #0 = { nocallback nofree nosync nounwind speculatable willreturn memory(none) }
```

When calculating a constant range, the range seems to be created based on the element type of the vector:
https://github.com/llvm/llvm-project/blob/59723e401bcad2650bcbfc39e7fe8479dfc7f62b/llvm/lib/Transforms/Utils/SCCPSolver.cpp#L45-L51

Then when a constant value is created from that, is has the type of the element, not the vector:
https://github.com/llvm/llvm-project/blob/59723e401bcad2650bcbfc39e7fe8479dfc7f62b/llvm/lib/Transforms/Utils/SCCPSolver.cpp#L912-L916

[Here is a minimal C++ Repro](https://godbolt.org/z/bGTqKK733): in this case, invalid IR was generated after replacing the vector with a scalar, and that led to invalid assembly being produced (assuming assertions are not enabled)

```cpp
#include <arm_neon.h>
#include <stdint.h>

uint32x4_t do_stuff(uint16_t InputScalar) {
        uint16x4_t InputVector_01 = vcreate_u16(InputScalar);
        uint32x4_t InputVector_02 = vshll_n_u16(InputVector_01, 0);

        uint32x4_t Clz_01 = vclzq_u32(InputVector_02);
        uint32x4_t Clz_02 = vclzq_u32(Clz_01);
        uint32x4_t Clz_03 = vclzq_u32(Clz_02);

 return Clz_03;
}
```

>From looking at the code, I don't think this is exclusive to `ctlz` (count leading zeros). However, I couldn't find another sequence that SCCP would reduce to a constant for a vector type

I have confirmed that this issue still repros on the latest trunk, 59723e401bcad2650bcbfc39e7fe8479dfc7f62b

For priority/triage purposes: this was not found in manually written code, but was found by a fuzzer to test SIMD codegen
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzUV19vGjkQ_zTmZVS064WFfeChSY5r1Faqmt71EXntWXDjtYnthcCnP413SSBN71qpLydFIOz575nfbyJC0GuLuGDTKza9GYkubpxfXKH9pm0Y1U4dFnfX159ABwiuxahbDCBqgxAdeFSdRNihjM4DPm49hqCdDXQpQDoborBxDO_cHnfoGb-G_QYt6AjKYYC40QE8bo2Q2KKNJHC6Cw66oO0a4gYhSGGEBzRJDOJhi0nWhohCgWuS1BBIus1uWPZ2-JxefdRWt8KQL-_Y9Ibx-SbGbWDFW8aXjC_XTtXOxLHza8aXR8aXoXyQTbH79JXxChifp1il6AIVAKQXYQN7HTcgQkAfU9opuegPKWx3ygxYmbHiegKPoAvOij9YmQ2qlu7osMwYryia87jLrP8zZtf2RwobbRFUcCvjpDBwYRfYJFNuFWLXNIzPX9zxqbbbLlI6SXfVWStaVCuhlAc2uzr3DSQvozmOc2DFDUShDUhhXvFI0Y2T6G5Cpz92fA06h0aYgJTsCz_8N_jpAx4cRd-95qf4XX74a35O3jzGl5ZP_gfB2c25hkJphMdfjmaIQbetoM6lTi2y3qSI0eu6ixjSYUqbza7A0uObWsh7sK7xiGBdOFgJ1nV2r62CsEXZGRHTnO-1MR5j5y202Dp_YHxuncXk7CmJU6ue5_SVpkEKk2zRSDxDAnhh12mEaW7TDwiIbUKOGkF6FBEV1CKgAmeT2Pn0X4780-C8GGodN109lq5lfJmGqP96s_XuG8rI-LI2rmZ8Oa1mvMBJltdSKF5Os1rWjSwqnDU4n8wq1chZU_L6zI6mH1-8sKFxvg2ML_-K2tA3AeadMzv0Y7ndMl58mEzffJjm57X5QrVJcHFWlJ0wHRLUntJvvGshbkQ_OwE2IqSszyswVIUkrIv_o6JUOX_zocrLF1D9Dn2qgYB2AO1rxq8Yv4LPPw_e9Z9fHt6_nxVFj6qgLQz4HQbi2AmjFdx-hr0IsEaLPlVcNBH9ANwn8hlopUfsgYrIiLAqPQ4YVNS3J6NECG1tDlAjmdh6RzSpiERECF2bRuGZNGjs6eXQ0rypF1DyNFlUtf6EF9pK06mEFsK3K4vOjjeEBq8IhKi0jefX6bPTNhb8cbIiun2iDDrNy1WEW0LsuyHV6pwdql4maSapv1N5VllPFLu-d1ddXjI-vzTDiksrg_8LKz0N7MLGmJU9t_LkhkqfXVr73ua1OT5HZI4Pqy5h56WrH4eU1Pl36r3V_1ArXlfj34cMA672as-X_4qqS8IE49x9aqN-4KVTqa1vQTnL-IxOtb3ve14HwEdpuqB3aWujXormSEsI43PpOksdLBTZO6J3gfHqYmW7Bek6o3rDDRGEsC5u0EPAhw6txH4M0qK4J9HTZnixBkLjPIgfLWm3sBE7ysQ22rc4TNaQQOgQQtRmWODCiRGMiBgiMbC9p0h_GrHO6-k8bL12XscD48votVgjbDu_dQEJY_ogCCZoShvXWUV40grbCWMOsPc6RmK64RHqLibpXrI-gICmOx7RUzlSvHe3H2-S-BrtSC0KVRWVGOEiL-ezPK-qPBttFrksJ3WeyVrVPMu5UjORF0oh5lVd1PV0pBc840VW5nOe8WmejWU5zeZNiRWqyRwxZ5MMW6HNOO0Qzq9HqZKLsijm2ciIGk04Lf5-kTig7taBlg4dYnhWizqa9C8CvTCb3vQvvRXhaXkPFyA5bOunh6ei0OJMDYY6NU6_PjsPrQ7StVtNG4Kzo86bxS_TVcqKOCYl9k8AAAD__6LhBJs">