<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/68182>68182</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            Cached disposition of [...] is incorrect: cached Variant, actual Invariant with opt -verify-scev -passes="loop-mssa(licm<allowspeculation>),loop(indvars),loop(loop-reroll)"
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            new issue
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          mikaelholmen
      </td>
    </tr>
</table>

<pre>
    llvm commit: 7e856d18943f
Reproduce with:
```opt -verify-scev -passes="loop-mssa(licm<allowspeculation>),loop(indvars),loop(loop-reroll)" bbi-86995.ll -o /dev/null ```
[bbi-86995.ll.gz](https://github.com/llvm/llvm-project/files/12799863/bbi-86995.ll.gz)

Result:
```
Cached disposition of %0 for loop Loop at depth 1 containing: %for.cond<header>,%lor.lhs.false<exiting>,%crit_edge,%for.body,%if.then,%for.cond.backedge<latch>
 is incorrect: cached Variant, actual Invariant
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: ../../main-github/llvm/build-all/bin/opt -verify-scev -passes=loop-mssa(licm<allowspeculation>),loop(indvars),loop(loop-reroll) bbi-86995.ll -o /dev/null
 #0 0x00005561addb4477 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (../../main-github/llvm/build-all/bin/opt+0x2f24477)
 #1 0x00005561addb1fce llvm::sys::RunSignalHandlers() (../../main-github/llvm/build-all/bin/opt+0x2f21fce)
 #2 0x00005561addb4b3f SignalHandler(int) (../../main-github/llvm/build-all/bin/opt+0x2f24b3f)
 #3 0x00007f4f3cbf5630 __restore_rt (/lib64/libpthread.so.0+0xf630)
 #4 0x00007f4f3a33c387 raise (/lib64/libc.so.6+0x36387)
 #5 0x00007f4f3a33da78 abort (/lib64/libc.so.6+0x37a78)
 #6 0x00005561acf8fc17 llvm::ScalarEvolution::verify() const (../../main-github/llvm/build-all/bin/opt+0x20ffc17)
 #7 0x00005561ae91a146 llvm::FunctionToLoopPassAdaptor::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (../../main-github/llvm/build-all/bin/opt+0x3a8a146)
 #8 0x00005561adfd5a6d llvm::detail::PassModel<llvm::Function, llvm::FunctionToLoopPassAdaptor, llvm::PreservedAnalyses, llvm::AnalysisManager<llvm::Function> >::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (../../main-github/llvm/build-all/bin/opt+0x3145a6d)
 #9 0x00005561ad7d64d4 llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function> >::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (../../main-github/llvm/build-all/bin/opt+0x29464d4)
#10 0x00005561abbb37dd llvm::detail::PassModel<llvm::Function, llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function> >, llvm::PreservedAnalyses, llvm::AnalysisManager<llvm::Function> >::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (../../main-github/llvm/build-all/bin/opt+0xd237dd)
#11 0x00005561ad7da8be llvm::ModuleToFunctionPassAdaptor::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (../../main-github/llvm/build-all/bin/opt+0x294a8be)
#12 0x00005561abbb357d llvm::detail::PassModel<llvm::Module, llvm::ModuleToFunctionPassAdaptor, llvm::PreservedAnalyses, llvm::AnalysisManager<llvm::Module> >::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (../../main-github/llvm/build-all/bin/opt+0xd2357d)
#13 0x00005561ad7d5664 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module> >::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (../../main-github/llvm/build-all/bin/opt+0x2945664)
#14 0x00005561ab7b8e33 llvm::runPassPipeline(llvm::StringRef, llvm::Module&, llvm::TargetMachine*, llvm::TargetLibraryInfoImpl*, llvm::ToolOutputFile*, llvm::ToolOutputFile*, llvm::ToolOutputFile*, llvm::StringRef, llvm::ArrayRef<llvm::PassPlugin>, llvm::opt_tool::OutputKind, llvm::opt_tool::VerifierKind, bool, bool, bool, bool, bool, bool, bool) (../../main-github/llvm/build-all/bin/opt+0x928e33)
#15 0x00005561ab7c6309 main (../../main-github/llvm/build-all/bin/opt+0x936309)
#16 0x00007f4f3a328555 __libc_start_main (/lib64/libc.so.6+0x22555)
#17 0x00005561ab7b2fd0 _start (../../main-github/llvm/build-all/bin/opt+0x922fd0)
Abort (core dumped)
```
This starts happening with 19ad1cd5cea1
```
Recommit "[SCEV] Support clearing Block/LoopDispositions for a single value."

This reverts commit 92f698f01fa0bb8967233a6391ada2d51849fa68.

The updated version of the patch includes handling for non-SCEVable
types. A test case has been added in ec86e9a99bca802.
```
which is a recommit of 9e931439ddb9
```
[SCEV] Support clearing Block/LoopDispositions for a single value.

Extend forgetBlockAndLoopDisposition to allow clearing information for a
single value. This can be useful when only a single value is changed,
e.g. because the instruction is moved.

We also need to clear the cached values for all SCEV users, because they
may depend on the starting value's disposition.

Reviewed By: nikic

Differential Revision: https://reviews.llvm.org/D134614
```
I guess that patch "introduces" the problem since it is more exact in that it clears a single value,
not all of SCEV as it did before. And suddenly it is exposed that someone else isn't invalidating as it should.
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzkWV1v2zoS_TXMyyCCRH1YesiD49TYYm-xRVPcfQxG5MjiliYFknKa_fULSk5iuW739rYXdz-AwI5F8syZM4e0NEbv1c4Q3bDylpV3VziG3rqbvfqEpHur92SuWiufbrQ-7EHY_V4Flq9hRXVZyaxuirxj6R1L1x9ocFaOguBRhZ7l6_kyq9L5zw4Brg_kVPd07QUd4HpA78mz_I5xrq0drvfeI-O1VmLP8g1qbR_9QGLUGJQ1LH_DeMP4Js5lvFZGHtD5xbUJxpGzWk_XObStuq6rpikTreHaAuNbSQfGt2bUGl7YHcmWt6fzk90_WXnHeN2HMPiYEt8yvt2p0I9tIuye8W3U5fh2PTj7DxKB8W2nNHnGtxlfNU1d5Yxvz4F5c4x5VM-POnyp2vxxg6InCVL5wXoVxQDbAeNlCp11ELOGX-ILBpA0hB4yENYEVEaZXawX42VnXSKskSzf9ISS3CTohvFSW5fo3icdak8s39BnFaZ1x3HhVHgguaP5YwSKnpg_qS4JPZnXoRgjaVF8mlbkG41B9BFrSgWUB2WEdS4qla9BzLn9ik6hCYxvAEUYUcNbczhemxa-_-XN-v4N-LHdqwAI7bgDR4N1AYKF766Q8n6cSgRoZGSkR0kQegLh0PcQEwgOBSVz-PuA4hPIcT-8FClNWNq8d3bncA_oduOeTIgkIEkY304ve1TmeqbzSqUdlZbXGD26bZVhfPuNzfGH7Ixvb4tjpRjPU0g_p2malmWVoZRtUaxWMGWRr1m-9k9-_ue9UyZMEn2MmsV4L5McPj5YHxzhnvEqFljFOjfAeP17hGL8Nv3MOx65vOyiSDY7I5t1gi6R_TCae7UzqP-CRmqKQtU_gU8Mt-DDz8Vr8w4Wkada_RQt2rxbxM6PsVdd0eWi7coqT-HhwZEP1tGDCzAlvdWqrYr5fQi9I5SJt0k64XZVni5Ai1NQzHOR1ytwqDx9iSYiTjXh5FVeLytVngFJXNWArb1E6xRohat6AVSdSiy6uhPZqT_vBWp0bw5Wj_M-iRfnbXasubDGhx9TP-1i1AWt1SktajLMiuqE1nY0IvL5aOOh_R69X0scgnXHDTOaxQZ6nn7cPa8Da4P6ySv_Dg3u4nm-ubAong3Vj1osxzrmsEiyXti7kyVW8oScpIBKH48H9P6dlaQvU1wk9XVxFtPeO_LkDiRnEeJR_jukgSjPf6zoWRE1XYjeLERfyaqQxakqUehvEfufE4k3RdTg9XaK59niW6tt23wlf4Yz_zhx_9-cLXksyaJm2ZmxsW5Pv7zfWTlq-mifefzbQ3Ne8F05Hpf8LFvGDBYp8nNblqvvs-VzTpvfKMzPstWLMF831Z8st-RRzIXa-Zmhyqr6LSflJY3_u7XhTRFzX4hTLKy4amvK8xNqbpx89F4NpJVZ3s7fB6fM7gN1l3z4RZIf0e0ovEPRTzjrS6O_qNahe3prOvt2P-gvZ1mr_zaGYQxbpS-A_NDwV9JZO4dP8eppVSZN9LhT5otD2w7hIVh73L5zvL8qI78169d4I6rIPc9r48h3v_-YORoeS7_wRrn0hqjytIEI-2OB8oizCFQtnwJ4XZYlPDzEe_4HH9CFh-eoX30i4LwsywXo6szZvJMpzHA_KFREegm1fn5YEdbR1Bagk-Nn2b352CsPEwMPPQ4DGWV2U5cMsgZlJmQpCLOLaz_Q3HMDxjkrb-83b35l5R3cj8PU-RCaMPoXbrUVnxjfxnvmu9c2kZ_6QwhemZ0mOKAeKYlQJ62niZ6jA0V-x2gN76qm7tKsw7Rt66Za8TzHKm8ylMhlmdVF02FVJ0sggnGQGEjCgZw_tqlCTzBgEP1zlyWqYKSOtCM7Y811zAtbTTNQeBrIJ7CGQD6AQE_Qo4eWyABKSRKUARJ1RQ02TSuwTnlyUb7HXsW4HhDcs5K2g4aaPCvyRsr2csl-mtQn8rz5HMjIOGtHYQJZG3kGAsHC1N15DadMZ91-6vPMEWa0RRiYaijQQEsweupGDY89GbBGP51ximqIHs0uGnYzg1GyS6AlgaOfe2DK-ODG6YYizt_bA8lFMn8nQO0tGCIZSU905_bZ3M-bYh010RqimpGZm247TkI9zXh7fAJJQxQoqtDTvGGiABMS4yt_2v9Mls3Tg6JHknD7xPI1GPVJidPxO9V15MgEhRriZD83A866hm6C8Uk8CxLrdoxv77K8qLLiokfewm4k7yH0GI4GZ5wrE-Y2uGecz953ttW0j0UQBCrMgjoC-owiRCtPCOpoMX9Wr5ciGRsmKW03q4k-rpFKQkuddZTA2kjwo5QUqz4Hos-D9bFEMYS3e7KGgLSPNjCMr2L8A2olcdJ6xvS9HbVMruRNLpu8wSu6yaqmyptmxcur_mZFFedYUNrIklLRtGVal3lZpUXD8zRrrtQNT-NzWFqkVVoXZdJ1TYqFqDIsMlF3K1aktEelX7S-mvqxN1Wd1fxKY0vaTz9JcG7oEabB6QS8u3LTTxHX7bjzrEi18uG1YldBBU03X2mXl7dJksQt_f0t6Pm0_nN-wrganb75_f3tSdJ_BQAA__-Pvfom">