<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/74461>74461</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [mlir] --canonicalize causes segmentation fault in eraseUnreachableBlocks.
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            mlir
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          anonymousMCS
      </td>
    </tr>
</table>

<pre>
    git version: 383e35048e16c85ab26bc46822d3ceb11fd4d3f2

system: Ubuntu 20.04.6 LTS (Focal Fossa)

reproduced with: ```mlir-opt --canonicalize a.mlir```

a.mlir:
```
llvm.func @func2()  {
  cf.br ^bb4
^bb2:  // pred: ^bb0
  spirv.mlir.selection {
    spirv.Branch ^bb3
  ^bb3:  // 2 preds: ^bb1, ^bb2
    spirv.mlir.merge
  }
 cf.br ^bb4
^bb4:  // pred: ^bb3
  spirv.mlir.selection {
  }
 llvm.return 
}
```


trace:
```
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: /data/bin1/llvm-project/build/bin/mlir-opt --canonicalize a.mlir
 #0 0x000055caf59393ff llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/data/bin1/llvm-project/build/bin/mlir-opt+0x16573ff)
 #1 0x000055caf5936454 SignalHandler(int) Signals.cpp:0:0
 #2 0x00007fb5b33b6420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
 #3 0x000055caf870ebfb mlir::SuccessorRange::SuccessorRange(mlir::Block*) (/data/bin1/llvm-project/build/bin/mlir-opt+0x442cbfb)
 #4 0x000055caf847134b llvm::iterator_range<llvm::po_iterator<mlir::Block*, llvm::SmallPtrSet<llvm::GraphTraits<mlir::Block*>::NodeRef, 8u>, false, llvm::GraphTraits<mlir::Block*>>> llvm::post_order<mlir::Block*>(mlir::Block* const&) (/data/bin1/llvm-project/build/bin/mlir-opt+0x418f34b)
 #5 0x000055caf87f90a3 mlir::RewriterBase::eraseOp(mlir::Operation*)::'lambda0'(mlir::Operation*)::operator()(mlir::Operation*) const (.isra.0) PatternMatch.cpp:0:0
 #6 0x000055caf87f9cb6 mlir::RewriterBase::eraseOp(mlir::Operation*) (/data/bin1/llvm-project/build/bin/mlir-opt+0x4517cb6)
 #7 0x000055caf87f9b89 mlir::RewriterBase::eraseBlock(mlir::Block*) (/data/bin1/llvm-project/build/bin/mlir-opt+0x4517b89)
 #8 0x000055caf86ab1db mlir::eraseUnreachableBlocks(mlir::RewriterBase&, llvm::MutableArrayRef<mlir::Region>) (/data/bin1/llvm-project/build/bin/mlir-opt+0x43c91db)
 #9 0x000055caf86b376a mlir::simplifyRegions(mlir::RewriterBase&, llvm::MutableArrayRef<mlir::Region>) (/data/bin1/llvm-project/build/bin/mlir-opt+0x43d176a)
#10 0x000055caf8694079 mlir::applyPatternsAndFoldGreedily(mlir::Region&, mlir::FrozenRewritePatternSet const&, mlir::GreedyRewriteConfig, bool*) (/data/bin1/llvm-project/build/bin/mlir-opt+0x43b2079)
#11 0x000055caf85f8fea (anonymous namespace)::Canonicalizer::runOnOperation() Canonicalizer.cpp:0:0
#12 0x000055caf85d9f3e mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (/data/bin1/llvm-project/build/bin/mlir-opt+0x42f7f3e)
#13 0x000055caf85da41a mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (/data/bin1/llvm-project/build/bin/mlir-opt+0x42f841a)
#14 0x000055caf85dac44 mlir::PassManager::run(mlir::Operation*) (/data/bin1/llvm-project/build/bin/mlir-opt+0x42f8c44)
#15 0x000055caf85cb9b3 performActions(llvm::raw_ostream&, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, mlir::MlirOptMainConfig const&) MlirOptMain.cpp:0:0
#16 0x000055caf85cce84 processBuffer(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::MlirOptMainConfig const&, mlir::DialectRegistry&, llvm::ThreadPool*) MlirOptMain.cpp:0:0
#17 0x000055caf85cd034 mlir::LogicalResult llvm::function_ref<mlir::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&)::'lambda'(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) MlirOptMain.cpp:0:0
#18 0x000055caf86cc324 mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<mlir::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>, llvm::raw_ostream&, bool, bool) (/data/bin1/llvm-project/build/bin/mlir-opt+0x43ea324)
#19 0x000055caf85c5897 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&) (/data/bin1/llvm-project/build/bin/mlir-opt+0x42e3897)
#20 0x000055caf85cd181 mlir::MlirOptMain(int, char**, llvm::StringRef, llvm::StringRef, mlir::DialectRegistry&) (/data/bin1/llvm-project/build/bin/mlir-opt+0x42eb181)
#21 0x000055caf85cd5e6 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&) (/data/bin1/llvm-project/build/bin/mlir-opt+0x42eb5e6)
#22 0x000055caf5870a7b main (/data/bin1/llvm-project/build/bin/mlir-opt+0x158ea7b)
#23 0x00007fb5b2e82083 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24083)
#24 0x000055caf590975e _start (/data/bin1/llvm-project/build/bin/mlir-opt+0x162775e)
Segmentation fault (core dumped)
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzcWU1z2zjS_jX0BWUVCYBfBx9kO5o3VfEbl5U5qwCwKWEDAVwATKL59VsgKYukZTs79sxmN-VYMtHofp5Gd6NBMOfkVgNcRel1lN5esNbvjL1i2ujD3rTu7mZ9wU11uNpKj76BddLoiCwRKQiQNKYFJJkoUsZxxgXNCowrIoAnSV3RitQ4im-jeNn_dgfnYR9m_85b7VuE40VMFxn69GWNIlysjGAKrYxzLMLleKaFxpqqFVCh79Lvgoooi_ufvZL20jQeXV6KAFsKpuQfgNgijDyKjdUNQ2T4cyaj1Lf9om61QBGNwyeOcBHhEqEov-5FEBL1glsUpR84p4OW8B0HaCjCqwivUGOh6qCGkfg40zXSfusALBwoEF4aPdZ8lLi2TItdP5kcB4e_RkZwZ8Y92kkifIMGLDONnc092C08qstvh6_P8KHP8iE_y-dko3OsBd9ajQYbx7Gzy9T_9pYJeG6t7j99WK4_INfyvfSIId5ukYXGWI-8QTvvm-CZHv9W-l3LF8LsI7wKWIaPy8aaf4DwEV5J51pwgSvTFZJaqLYC5HeAhGVuhzgTXzs8i9782jPxFVXtvnkEGC9Q9-_emq1le8Tstt2D9v0K4VXFPIvwikudPLXPW6mqfjTCq1ciu3dqhEmM4h9xHMdpKlidlqQkdd05O4AiIe36L_dWat9B_tL5FBcnIcu-b4zzFtg-wlmIIal9CPou9v8M6ghfxz-SLM1JXT-mc4CbzOBmNKVoLbeaqf9julJgI1wM1vvHbiGa4OG4-_-oCA-K8pqnnBCeURyjzcaC88bCxvoBvJI8wqsfRbbJ6KWSuv1xudVtP9D4nQVWLZxZxD1iSnE8wUvGeIs8Bl5zdCwgZLluhQDnjH1gegtnn-HiJH6tjPga4eXbfUspFrzmE6x0gpXmCaF8FArSg2Xe2I3tsd6chhqzOY5G5OYc3puRovWeKXXv7Rr8RMtvljW7L5bJEO_ntJAP_YP_NxU8QB20Fm14im9QzZSDqZ2f0hd-0JiJ8xtjK3iGSDB2ZkGQMNr5LvjfvDJJURM6XZl0GkV1GTMyiqIH-G6D_6-ZG2IILHPwuZlg_dyEFQpbcBdA_cMI54rtecXiCOevi5tmWOVuU3tJvvdI8MVCOstCgpTonnkPVt8xL3bn0zKbMxU8eyvTty5ImuSCZ5MFyecweVG-DnOIlr8modMk50U5QVlMUGaMJ9W4-HSYftcWmNgxrnp4boJvQqQv7adcuWt9mLa0lh1COo4T5gG2XbP34R2YEVEm1TQhyikzTvKMjZg5uW-UrA89il-RUpXk2ahRxSSJp5RKGufjkGJNow5D_rilrlZGVb9ZgEqqw4xfB7Nndnq8suYP0AP5Qc8a_KhwjaU7zYdB-sboWm6DADdGvU-0Eo7jvJw4YLK1F2ld1MCCmcfjBNJsD67puo-hHt2MWpsBum31Zz2qAF33PZF7WnmCeTw1X5U1gZFHKvBMqmN9-WI-N_fMuWXFmm7TGyxPViIIDJvfc7VpPLLUTB2cdHdMs23oY47-vkGt7g5a1fv0VRTXeU1g4nwyY89owv5t9veyASU1zIpxEH0klb27O8aTgqmP2nnbtc1hn1q-JNBb7gcG7PfMgvYfdW2OqfEe4Y7rgibTfKdzjwtKZ0CP1M9G1ztvcrguBKUThNOuIxW85AQ1YGtj98vuqOZeOQY4Xw0FeccsVJvG20nHtzatFXC3taEJO1-J7j59fLgx2sMP_2Qx75S0nxt_x6Tua9SkDRuNns_4bMZPQEFRY03ovq_buu7OEj9Fr9Xyny08oXcHe2MPR1Uj-Qpq1iq_qUCBh-fn9A3qT3Mey91KFs7TYTdw3h6e7HRfuqPL_amgv-qufOauKibjgP1ktqHAPoBrlR8ZqlvdxcrGzvbT6YQIF3-fO59f1PLxkCGYUuHIvqn1BPbIT79geJxf9p9MmdmRoD8R_DKrggtl9PbvdewLkF5PmFn7LQTB44RxjZJ-qav7WcX5T7D7L0zSFyVOvUL_-fZ-FRjB0-2xnNXDtCjz85n2v1Yn3txrACnKfOxMHM83l6RInnXm0PaJHesbvPn7JW-l3g4viJ55_LIn3oEhT4pkwjCZM0whexeGfz2VFLIJlclRKS3ymOUc7ZnUb33hmxbAcj6xRcbvaTEUOC4I2myU5GLjPLN-MzL80stasXBmkXV2MI0LMrFCp6-V4zJPAfX63_wSG-d5ejpsrWH7ePJAXfoGA8JY6K4CoDrhOt5WXFRXpCpJyS7gKsnjJM_LnCYXuytSEFFyUqU4z7KU0TJhhGU0J5CkPOb0Ql7hOBxt4zTBJKXJQmScViUFXIYDblpENIY9k2rRXa8Yu73objGuckqz5EIxDsp1t3sYd2GGcZTeXtirjj9vty6isZLOu5MCL73qbgS7Cent_AJCsNaBQ-6pH6RG519JLS5aq67-_IVMx-ZfAQAA__-DJ7vq">