<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/108697>108697</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            clang crashes on valid code at -O{2,3} on x86_64-linux-gnu: Assertion `(BestFactor.Width == LegacyVF.Width || planContainsAdditionalSimplifications(getPlanFor(BestFactor.Width), CostCtx, OrigLoop)) && " VPlan cost model and legacy cost model disagreed"' failed 
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          zhendongsu
      </td>
    </tr>
</table>

<pre>
    Compiler Explorer: https://godbolt.org/z/9K4a3Pr7j

```
[508] % clangtk -v
clang version 20.0.0git (https://github.com/llvm/llvm-project.git 223e2efa5e886502a9467b7ef700ebce9b7886e8)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/software/local/clang-trunk/bin
Build config: +assertions
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/10
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/9
Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Candidate multilib: .;@m64
Selected multilib: .;@m64
[509] % 
[509] % clangtk -O2 small.c
clang-20: /local/suz-local/software/clangbuild/llvm-project/llvm/lib/Transforms/Vectorize/LoopVectorize.cpp:7390: llvm::VectorizationFactor llvm::LoopVectorizationPlanner::computeBestVF(): Assertion `(BestFactor.Width == LegacyVF.Width || planContainsAdditionalSimplifications(getPlanFor(BestFactor.Width), CostCtx, OrigLoop)) && " VPlan cost model and legacy cost model disagreed"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: /local/suz-local/software/local/clang-trunk/bin/clang-20 -cc1 -triple x86_64-unknown-linux-gnu -emit-obj -dumpdir a- -disable-free -clear-ast-before-backend -main-file-name small.c -mrelocation-model pic -pic-level 2 -pic-is-pie -mframe-pointer=none -fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -fdebug-compilation-dir=/local/suz-local/software/emitesting/bugs/20240914-clangtk-m64-O3-build-061621/delta -fcoverage-compilation-dir=/local/suz-local/software/emitesting/bugs/20240914-clangtk-m64-O3-build-061621/delta -resource-dir /local/suz-local/software/local/clang-trunk/lib/clang/20 -I /usr/local/include -I /local/suz-local/software/local/include -internal-isystem /local/suz-local/software/local/clang-trunk/lib/clang/20/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/11/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -O2 -ferror-limit 19 -fgnuc-version=4.2.1 -fskip-odr-check-in-gmf -fcolor-diagnostics -vectorize-loops -vectorize-slp -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/small-34578e.o -x c small.c
1.      <eof> parser at end of file
2.      Optimizer
3.      Running pass "function<eager-inv>(float2int,lower-constant-intrinsics,loop(loop-rotate<header-duplication;no-prepare-for-lto>,loop-deletion),loop-distribute,inject-tli-mappings,loop-vectorize<no-interleave-forced-only;no-vectorize-forced-only;>,infer-alignment,loop-load-elim,instcombine<max-iterations=1;no-verify-fixpoint>,simplifycfg<bonus-inst-threshold=1;forward-switch-cond;switch-range-to-icmp;switch-to-lookup;no-keep-loops;hoist-common-insts;no-hoist-loads-stores-with-cond-faulting;sink-common-insts;speculate-blocks;simplify-cond-branch;no-speculate-unpredictables>,slp-vectorizer,vector-combine,instcombine<max-iterations=1;no-verify-fixpoint>,loop-unroll<O2>,transform-warning,sroa<preserve-cfg>,infer-alignment,instcombine<max-iterations=1;no-verify-fixpoint>,loop-mssa(licm<allowspeculation>),alignment-from-assumptions,loop-sink,instsimplify,div-rem-pairs,tailcallelim,simplifycfg<bonus-inst-threshold=1;no-forward-switch-cond;switch-range-to-icmp;no-switch-to-lookup;keep-loops;no-hoist-common-insts;hoist-loads-stores-with-cond-faulting;no-sink-common-insts;speculate-blocks;simplify-cond-branch;speculate-unpredictables>)" on module "small.c"
4.      Running pass "loop-vectorize<no-interleave-forced-only;no-vectorize-forced-only;>" on function "main"
 #0 0x000055ba1845c4ff llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x43484ff)
 #1 0x000055ba18459a34 SignalHandler(int) Signals.cpp:0:0
 #2 0x00007fbbfabd4420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
 #3 0x00007fbbfa60b00b raise /build/glibc-LcI20x/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
 #4 0x00007fbbfa5ea859 abort /build/glibc-LcI20x/glibc-2.31/stdlib/abort.c:81:7
 #5 0x00007fbbfa5ea729 get_sysdep_segment_value /build/glibc-LcI20x/glibc-2.31/intl/loadmsgcat.c:509:8
 #6 0x00007fbbfa5ea729 _nl_load_domain /build/glibc-LcI20x/glibc-2.31/intl/loadmsgcat.c:970:34
 #7 0x00007fbbfa5fbfd6 (/lib/x86_64-linux-gnu/libc.so.6+0x33fd6)
 #8 0x000055ba19db5fcb llvm::LoopVectorizationPlanner::computeBestVF() (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x5ca1fcb)
 #9 0x000055ba19dd169a llvm::LoopVectorizePass::processLoop(llvm::Loop*) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x5cbd69a)
#10 0x000055ba19dd42d1 llvm::LoopVectorizePass::runImpl(llvm::Function&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x5cc02d1)
#11 0x000055ba19dd4943 llvm::LoopVectorizePass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x5cc0943)
#12 0x000055ba19946a06 llvm::detail::PassModel<llvm::Function, llvm::LoopVectorizePass, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x5832a06)
#13 0x000055ba17dec0d1 llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x3cd80d1)
#14 0x000055ba15926546 llvm::detail::PassModel<llvm::Function, llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x1812546)
#15 0x000055ba17deaa3d llvm::ModuleToFunctionPassAdaptor::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x3cd6a3d)
#16 0x000055ba15925216 llvm::detail::PassModel<llvm::Module, llvm::ModuleToFunctionPassAdaptor, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x1811216)
#17 0x000055ba17dea471 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x3cd6471)
#18 0x000055ba18713673 (anonymous namespace)::EmitAssemblyHelper::RunOptimizationPipeline(clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>&, std::unique_ptr<llvm::ToolOutputFile, std::default_delete<llvm::ToolOutputFile>>&, clang::BackendConsumer*) BackendUtil.cpp:0:0
#19 0x000055ba187167f8 clang::EmitBackendOutput(clang::DiagnosticsEngine&, clang::HeaderSearchOptions const&, clang::CodeGenOptions const&, clang::TargetOptions const&, clang::LangOptions const&, llvm::StringRef, llvm::Module*, clang::BackendAction, llvm::IntrusiveRefCntPtr<llvm::vfs::FileSystem>, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>, clang::BackendConsumer*) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x46027f8)
#20 0x000055ba18decf5c clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x4cd8f5c)
#21 0x000055ba1ac8966c clang::ParseAST(clang::Sema&, bool, bool) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x6b7566c)
#22 0x000055ba18ded378 clang::CodeGenAction::ExecuteAction() (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x4cd9378)
#23 0x000055ba1908a659 clang::FrontendAction::Execute() (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x4f76659)
#24 0x000055ba1900c07e clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x4ef807e)
#25 0x000055ba191772b6 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x50632b6)
#26 0x000055ba154f2b15 cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x13deb15)
#27 0x000055ba154ebbba ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#28 0x000055ba154ef58e clang_main(int, char**, llvm::ToolContext const&) (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x13db58e)
#29 0x000055ba153dd43b main (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x12c943b)
#30 0x00007fbbfa5ec083 __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/../csu/libc-start.c:342:3
#31 0x000055ba154eb64e _start (/local/suz-local/software/local/clang-trunk/bin/clang-20+0x13d764e)
clangtk: error: unable to execute command: Aborted
clangtk: error: clang frontend command failed due to signal (use -v to see invocation)
clang version 20.0.0git (https://github.com/llvm/llvm-project.git 223e2efa5e886502a9467b7ef700ebce9b7886e8)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/software/local/clang-trunk/bin
Build config: +assertions
clangtk: note: diagnostic msg: 
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clangtk: note: diagnostic msg: /tmp/small-682958.c
clangtk: note: diagnostic msg: /tmp/small-682958.sh
clangtk: note: diagnostic msg: 

********************
[510] % 
[510] % cat small.c
short a, b, c, d;
unsigned short e;
int main() {
  for (; d; d++) {
    e = a + b;
    c = b > 3 || e > b ? e : e << b;
    c = c ? 2 / c : 0;
    b = 1;
  }
  return 0;
}
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzsW9ty2ziTfhrmBgUVCZ4vfCFL1iS1mXUq9j9zqQKBJoUJCXAB0Id5-i2AlCzKSuIk9h5mt0pRSBy6v258aDQgmBojGglwEaSXQbp-Rwe7U_ri7x1IrmRjhneV4o8XK9X1ogWNrh76VmnQQbxEO2t7E8TLgGwCsmkUr1RrF0o3Adn8HZBN-W8JjT_p_K8gXAfhcvrOwukzvqaXaVgE6RoFJEWspbKxXxC-G2v9O7oDbYSSiISLcBE2wqKAFCfKhd0N1YKpLiCbtr3b_4d7rf4CZheuFyExEKhpCkWRpSGhZZLlVQ51HoZQMSirvCgyKAJSjupvqW7AOlMfimybJXiQX6S6l7gVcnjAjRymdjsNlKNOcWhd614Z8TBWfZDG0rYFvhbeZw6XYrQNyMYMf-PDs6rtPdVwVO1tx1YP8ktANpWQo8DLQbQcMSVr0YwCL6kxoK1Q0oxNNmqQHDEqueDUAvpttUJixEFdswnHYLRTJyrnP8YCspmsfLKObKLwDWRGry9zGrEbaIFZ4K-Cb3VA1g2tFa5XvESLIL4MkrDLkhOV32rkaV7uaX6u7ED9a4JMR9t2wY7mACbhy9jjW1eOIycz4GheeOtvNZWmVrozAdn8AcwqLf52Ej4q1R_eF6zvg3iZx6XX7yXEyyBe7lt4526oezmqPZbhW3xqqZQ-agTxkqmuHyxcgrF_bALi51u8RMs9jZGLDqRw9aPkxZ-C2x0K4nUQr9FHaCh7_GOzL81XQb5CfUvlSklLhTRLzoUTRNsb0fWtqAWj4_wgRQPWgdkofUaFQ0JWaKWMXdkH93itReOs8TUlCkgWkAwFhKA_nBjElLHjxEdUctR6bMelXBjaaAAeEBKQHNVUtMAX49h--ni1vLlCZqg6YRFF1dAgDb3SFll1Gl-_E-ICshHGDODG02MRkrUDB2R3gJimZocqyr5YTRk4y3oNvVYMjAGOjBr0WOx6UmMUE9SRWg8SGaZFbyfIN5ayL4gPnePFWBQugrD8pFWjaYeoboYOpDW_Gu32ZSREmLEIYatF38JXQzHC0AmLVfUXwg4eFxpRjLAbgKoFXGsAhFkLVGNqLK6gVhqw8wlIjnBHhcS1aAFL2sF-DiLcaXAgHX_wOKS9YAj3guEW7qBFZHwRBvcCEO5qTTvAvRLSOsavpZKAcN1Ru8OgtVQI13WPmZJuLGwQr5VEuJYKaxcQhWywa4twx5Q0Vg-On5i2ghowCNeDvBeSY-usMkG8Jghbv1Bh1g_OPThLELaDBF_QgATtEHOohqYB7aqEbIJ43fAK4dqXY-ZX-NFM7taq9fcHzzkcjHXCyKYaGkc9EpIkLKMETwENd1mCr2PsYxIOsygjUUA2HFpLEa6ZugNNG_hv0q9hZL5T-dNsHQOqL_MAEP5wtNZMXfazcax7oZ5DJ88lSVsszKOx0L0a1u8p-YoR32j63bWVbBaL519n2j7XBg_ugT3XOjU9I-fbvX9chV-gcQ1aK41b4eJ2VCJcN3JgeMpUg3idLMgiQrg2X0SPFdeY7YB9wULipqs971ulMRe0kcpYwQzCd_tFF7dK9bMC0_YI15RzbUSD8Hq7_W212r5f_nG1Xf-5_Lwh29Xmw3Z583sQryOElUNtu94RwoUxHCdpXsBCIfyA2Dy9iFzwDuIVqDqIr1BPtQGNqEUuKKoauYg4tiSu5XVvRSf-Bj2Wxa7s8yBdQEE9NcYtjfUg2ZhzrYC6gCPkXRBfBaSoW0UtEdIGZNWqe9DYhzgqrRsALaQRzPg6t-IW7j-slaUWgni1A8pBYz707bSeB_GlVNgtZFQDrt2AWOU1eQmYQwu-nV_WxyJhrBbVYN1iJ6RbOLFtBe5o3wvZ7JU_-T6IV1KN9GiB3nk1DDhWsn0c9T8N07xqBCJkDT56N9Iti3v5raIcQys638RYprpKSKetow9YWNBTxhKvo70aLepHXIsHv7SM0s2Y3zyyugniVaXkYLATh-1Og9mplk8CaqXvqebY3AvLds7tPIgvpzdNZQPYKiyYW9b3xVY5Jn4Z-hHAF4B-pGYQX-6UMNYF7U5Jr9GMjcZyZ53BxioNBt8LOyrENXUpslt6Lo2QX067mx7Y0FILuGoV--KLJvvG_pWmku1GRU-NB9lr4ILtF0Tvl_ZoCHVAVuML3rv5l5zuB3CQWrVtEK-uyVhq9wk1vqfaL7BkZbSiQbzqNRjQd4D9MJ1nxa_i6YyhbsoI1gXxiratut-7yM-Uq3ESHFTiWqsOU2OGrp9y41GQG5kJz977AVlxcYc1dLinQrumloqWuY3tSOEX81Aq_ENUdCP9nI0zKh5Yd0Knl1LRqfglNn6TiqXbKyjpdgNDCy487sMvIWMMTc7F0FcNQh7APio76S7XPehHAYlDFD6EYRimaUWjIklZUtdH-znzaMaHT1pI67cAt-M-onhqpOn9VhmrgXZ-m-Q24HbcNBWvsxEIyGX4kMRJkdT14ZDGwY9O4Jc0TtCNaCRt31PJWxcCignNWGymnW3o_x0EkUlQXldVTSueJCRE260GT6CttntjfJZzJmdpRdVbfxy0MGoxIo6clBneeKYmC6swrJCmwjiCbPbb96YVFcMf2QcSPhxeySJ2KZTxVuyTJ_NoOPQu_R2keBgL7jwaObhXL3rBgniZRkG8jJ6QJDMkKdAiLRGtlLf0ZUgsH73he3klhVOSPylJT5XkpEQN2O2Ie2ugcSFpe0fb4cUeENK2njeUd6ZhdFSdumRmWTzpzs7p3sp26zpuuXJT4ddUlrkjUZw86cznOuuq5tkLiMMcZTJPmTiueTajTHFM8ZJXac2qXzlxeeVZmTIa1ayaQS7nkHmUlfQrkOETNVOImQ4lPk4p4Kx5QJZvAb3iWUkP0F08CU-gJ4RH34euB_mh69sZ7M0-GXYh8fWhs5DwaAY9OoVeJvGLoH8d9uqo_1LS9tEI8zuVLrcP4tWZTm7ReSNzyySemUtm5pZJRsPsCC4Hl6lMixc15vfxjP4c6JmZz930U15wn_897i1iQsNs5t742L05BxbOJoJ36beg_vO9FjNehCdzMDn2WlqSLE1eg5Rv5u1__ihFRUTSZM7t9ITblMb8CO7vPmO_VXtozvtLTnur9HnDxw4_ZPbU5e2omdGYz4zOTqiZkujHqLm3cvVCV_2EL77GrP9xDo6KKCLRnFX5KauS_CUR85xb_2HecnRM8nmknKW1RR7FWR47tVQq-dipwSBJOzC932yWI8qrTtilMdBV7eN7aPt9lvt5kNPx5JgBix5af9hTjOfdvtHl-HvP8hAwjeVjzSDFfwyw7e3cJ25b299rYWG739wedeLgTxK2_qgRvtNxCrbZS9TeKtVeD7Yf7EaMvHiJzpNexwqf-2ClpBk6tzf2WfVU-i8r2uebYzdW5clYZXldHIt14zIJGTHMPb9-Ouy-ko0fmFNg7_0R7w1QzXbX47EU8ifEz5uuFIffQH6n1XiD4zuNPlLZnGvy5NYbq4VsPkN9Lux5953z7_LMovxBWj0YcQefoV5J--lk1O_qKR93w3fjf4GY1uf_epq-gDKvfLKThSSvi-P4QOYHUxxYnbJv4Rpp5M98_A2H8fjzX1KckHF5c7tS0sKDfZNQlzBe1CmbmTLbmFFWlFk2M-UT1QaWN7dzoDfQ0YmPlVLt0_-vDTmr8jTL5pDJifd5nBdnJuFE9DEIPAAbLOy5_wZHDQnjZZzPaTLbppRhQbO0PAa60W6wD1PyGOnbYKzzLEvLGcZkjjFkYQ5zZ4537PyVMcngvD-_btSb8BjqIsxhZscsbS6jPCdVNlsGRsRP5txN1yfm6J-Z-yZnO2EWk2qWoJF5BpzUpIpSxFi0HU_FjzKopdb00UX9eMV2VO8Xh-U-PM7KyArdKcHfxIwo5lBF6cyMfG4GVFVF0d73q-jWB4kjY2462rbjkYY_pDpn08my52RMUfJoYSwR1-IO9NkkgRQnsOq0mFi-9-_486_3nnfW8mVKX92jVVrMiT3Lb9KY8ySu0HQ-_Kq6CSuTuDrWffgBZn9MzcIiRtttKyq2NZZqu_2Rg2pmhv1PA-Ojr_Ry_JF1nBD3_aQ-OiVTlgAaFb--4_MseXL8dE0niJfI36lwD4OkVQvIKgQjnxFTXUcl99cEK6Ut8K_3Hi8N11Nw3HedLt4hPnjB4-8nzrbBAMJ3vgwAiaNoVf7_JeSfv4R8NDJSuZRziZ5uu6DOjP0mAv7C5-hq-XSbcnl7u1y9R7fvr9Dm-uPH6z8__PtvaPPh49UNur32xZf_-g19vvp0_fn2cIfx07nbkIVxgeerNyIPDTQgf0UQOKL2IPJlHphf1MkKUqbF7Orvz0kwux8fhtcajPQyjcLnd52fyhi180tIZqe0RdQnt35tcF88iC_H6kH6P1LgaGwHhwohLZpWFb9E5FM5QrXSPnDFl14O4gG59J9ZK4QABfEaUcdgVB3kuhrmayoUxFco3t8yBv_qCjf-eem_V0G8Otub-YbEjZF_XqJw1qryraKjsiBf7x812EHLox6HusPfULzjFzEv45K-g4soJ1kcFWUYvttd1EWRp2Fex2UackgYz6MqqrOaUwKcsPKduNhflIziMErCRUx4kaWEl0nGk7hgQRJCR0W7cBFsoXTzzt8uvojCIivzdy2toDX-r0YIma4TkiBdv9MXPuT525hJ2ApjzZMIK2wLF2NA9VeSwSAl0R1thQsnHBC1CF8H-SUJyCoO8rWrfvZr6f-xy-Lo3aDbi5-_DT4N2d0F-c8AAAD__xW7Wak">