<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/121897>121897</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [clang] Crash at -O3: Assertion `hasVectorValue(Def)' failed.
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          cardigan1008
      </td>
    </tr>
</table>

<pre>
    This code crashes at `-O3`:

```c
int *a;
int b, d;
static int f = 65535;
char c[];
int h(int i) {
  int g = 1;
  for (; b;)
    if (a[0]) {
      g = 0;
      break;
    }
  if (g)
    a;
  else if (i)
 return 1;
  return 0;
}
void k() {
  int *e[10] = {&f};
  for (;;) {
 d = 0;
    for (; d < 8; d = f - 65535 + d + 1) {
      int j = h(f);
 c[j + f - 65534 + d] = 0;
    }
  }
}
void main() {}
```

Compiler Explorer: https://godbolt.org/z/rcGqsE196 

Bisected to https://github.com/llvm/llvm-project/commit/f48884ded884d982a7fd13394b0e93e6588f4143, which was comitted by @fhahn 

Crash:

```console
clang: /root/llvm-project/llvm/lib/Transforms/Vectorize/VPlan.cpp:236: llvm::Value* llvm::VPTransformState::get(llvm::VPValue*, const llvm::VPLane&): Assertion `hasVectorValue(Def)' failed.
```

Backtrace:

```console
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/clang -gdwarf-4 -g -o /app/output.s -mllvm --x86-asm-syntax=intel -fno-verbose-asm -S --gcc-toolchain=/opt/compiler-explorer/gcc-snapshot -fcolor-diagnostics -fno-crash-diagnostics -O3 <source>
1.      <eof> parser at end of file
2.      Optimizer
3.      Running pass "function<eager-inv>(float2int,lower-constant-intrinsics,chr,loop(loop-rotate<header-duplication;no-prepare-for-lto>,loop-deletion),loop-distribute,inject-tli-mappings,loop-vectorize<no-interleave-forced-only;no-vectorize-forced-only;>,infer-alignment,loop-load-elim,instcombine<max-iterations=1;no-verify-fixpoint>,simplifycfg<bonus-inst-threshold=1;forward-switch-cond;switch-range-to-icmp;switch-to-lookup;no-keep-loops;hoist-common-insts;no-hoist-loads-stores-with-cond-faulting;sink-common-insts;speculate-blocks;simplify-cond-branch;no-speculate-unpredictables>,slp-vectorizer,vector-combine,instcombine<max-iterations=1;no-verify-fixpoint>,loop-unroll<O3>,transform-warning,sroa<preserve-cfg>,infer-alignment,instcombine<max-iterations=1;no-verify-fixpoint>,loop-mssa(licm<allowspeculation>),alignment-from-assumptions,loop-sink,instsimplify,div-rem-pairs,tailcallelim,simplifycfg<bonus-inst-threshold=1;no-forward-switch-cond;switch-range-to-icmp;no-switch-to-lookup;keep-loops;no-hoist-common-insts;hoist-loads-stores-with-cond-faulting;no-sink-common-insts;speculate-blocks;simplify-cond-branch;speculate-unpredictables>)" on module "<source>"
4.      Running pass "loop-vectorize<no-interleave-forced-only;no-vectorize-forced-only;>" on function "k"
 #0 0x0000000003c71738 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x3c71738)
 #1 0x0000000003c6f444 llvm::sys::CleanupOnSignal(unsigned long) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x3c6f444)
 #2 0x0000000003bbc988 CrashRecoverySignalHandler(int) CrashRecoveryContext.cpp:0:0
 #3 0x000077fbea242520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x000077fbea2969fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #5 0x000077fbea242476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #6 0x000077fbea2287f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #7 0x000077fbea22871b (/lib/x86_64-linux-gnu/libc.so.6+0x2871b)
 #8 0x000077fbea239e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
 #9 0x00000000058fd2be llvm::VPTransformState::get(llvm::VPValue*, llvm::VPLane const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x58fd2be)
#10 0x0000000005790d0d llvm::InnerLoopVectorizer::scalarizeInstruction(llvm::Instruction const*, llvm::VPReplicateRecipe*, llvm::VPLane const&, llvm::VPTransformState&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x5790d0d)
#11 0x00000000057916d0 llvm::VPReplicateRecipe::execute(llvm::VPTransformState&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x57916d0)
#12 0x00000000058e3ce7 llvm::VPBasicBlock::executeRecipes(llvm::VPTransformState*, llvm::BasicBlock*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x58e3ce7)
#13 0x00000000058ef282 llvm::VPBasicBlock::execute(llvm::VPTransformState*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x58ef282)
#14 0x00000000058f0ef1 llvm::VPRegionBlock::execute(llvm::VPTransformState*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x58f0ef1)
#15 0x00000000058fddb1 llvm::VPlan::execute(llvm::VPTransformState*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x58fddb1)
#16 0x00000000057be1eb llvm::LoopVectorizationPlanner::executePlan(llvm::ElementCount, unsigned int, llvm::VPlan&, llvm::InnerLoopVectorizer&, llvm::DominatorTree*, bool, llvm::DenseMap<llvm::SCEV const*, llvm::Value*, llvm::DenseMapInfo<llvm::SCEV const*, void>, llvm::detail::DenseMapPair<llvm::SCEV const*, llvm::Value*>> const*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x57be1eb)
#17 0x00000000057d24c3 llvm::LoopVectorizePass::processLoop(llvm::Loop*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x57d24c3)
#18 0x00000000057d3e19 llvm::LoopVectorizePass::runImpl(llvm::Function&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x57d3e19)
#19 0x00000000057d4453 llvm::LoopVectorizePass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x57d4453)
#20 0x00000000052f765e llvm::detail::PassModel<llvm::Function, llvm::LoopVectorizePass, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x52f765e)
#21 0x000000000361c6e0 llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x361c6e0)
#22 0x00000000011305ce llvm::detail::PassModel<llvm::Function, llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x11305ce)
#23 0x000000000361affb llvm::ModuleToFunctionPassAdaptor::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x361affb)
#24 0x000000000112fc5e llvm::detail::PassModel<llvm::Module, llvm::ModuleToFunctionPassAdaptor, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x112fc5e)
#25 0x000000000361aa00 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x361aa00)
#26 0x0000000003f247bf (anonymous namespace)::EmitAssemblyHelper::RunOptimizationPipeline(clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>&, std::unique_ptr<llvm::ToolOutputFile, std::default_delete<llvm::ToolOutputFile>>&, clang::BackendConsumer*) BackendUtil.cpp:0:0
#27 0x0000000003f28335 clang::EmitBackendOutput(clang::DiagnosticsEngine&, clang::HeaderSearchOptions const&, clang::CodeGenOptions const&, clang::TargetOptions const&, clang::LangOptions const&, llvm::StringRef, llvm::Module*, clang::BackendAction, llvm::IntrusiveRefCntPtr<llvm::vfs::FileSystem>, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>, clang::BackendConsumer*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x3f28335)
#28 0x000000000460209e clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x460209e)
#29 0x000000000660f9cc clang::ParseAST(clang::Sema&, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x660f9cc)
#30 0x0000000004602478 clang::CodeGenAction::ExecuteAction() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x4602478)
#31 0x00000000048be799 clang::FrontendAction::Execute() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x48be799)
#32 0x0000000004840e2e clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x4840e2e)
#33 0x00000000049abb8e clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x49abb8e)
#34 0x0000000000ce93ef cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0xce93ef)
#35 0x0000000000ce0e8a ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#36 0x0000000004647ae9 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::'lambda'()>(long) Job.cpp:0:0
#37 0x0000000003bbce34 llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x3bbce34)
#38 0x00000000046480df clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const (.part.0) Job.cpp:0:0
#39 0x000000000460c1ed clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x460c1ed)
#40 0x000000000460d26e clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x460d26e)
#41 0x0000000004614d95 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0x4614d95)
#42 0x0000000000ce6233 clang_main(int, char**, llvm::ToolContext const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0xce6233)
#43 0x0000000000bb2524 main (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0xbb2524)
#44 0x000077fbea229d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#45 0x000077fbea229e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#46 0x0000000000ce0935 _start (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+0xce0935)
```
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzkW1tz3Ki2_jXyCyWXhNRq6cEP7ba9J1OZSir2zqsLoaVuxgi0Afkyv_4UILUuvsSe9Mw-Z47LiVsIFt_6-FgshJpozXYC4CxYnQerixPSmb1UZ5Soiu2IiKMoPyll9XR2s2caUVkBooroPWhEDAqyKPySBFkUJJsgcr9Z5H9pEG2YMCjAGxIk5_1VGeAtqvy1NsQwimxxjYLkAmWrVbLy9-ieKEQ9prH1PsC5_csCXKBgbYuRa79z7WNfE6FaKhTgPEjOUWnLcOGKEWK1LSfB6jyyhidW7I-3Eg1W7E-pgNyNBcH6wvfp7OxGw2SoA1xDf5v1txWYTokRXX_d9-NN3ktWoTuLeeFZgDcQrM5ji9fBszdxVttmz7z1vg7tq6U7E1rsvS06fLxANQo9_yjArgyfo3hJkAX0u6tuR6K2_nnjdqR-d20GO6m3M6COnnPo_07cbwgTEwb87UFOXl1b2bSMg0KXjy2XClSQbNDemFZbAeKrAF_tZFVKbk6l2gX46o8AXyn6r__oy7jIkDdyzjRQAxUyctmWmX1XnlLZBPiK8_vhT9gq-TtQE-ArKpuG2Q91mud5WkFl_y9yTNZ1FSdJkZYRFAlkqzyv0zhNrOAf9ozu0QOxE6hhxvZdPqEgjeo92Yse1tZOqxfmkRRacrBzghOxsw5bn6Q0z8ENkFkZ4KsbRYSupWp0gK--AzVSsT_Afv7KiTilbRskG5xk1qJrmGyCZPOd8A4CPCv6ejB1bYgBX7oDE-B8Wmtoaj22qM3MxmciIMCZ08wGbbQGZZgUNoTsifb4egv5BTht4TWqCeNQnT5Xwjmhd0YRCm8xdm0IvUNV17S-VnQaRMVXJXeKNIioXdeAMLqnVLb9-DqFhTAoDF854kMyQNahUZ24C_BVaQXrb6NwVz0QVYcpCncolNYiaVtrtzNtZ041ChvLBwrDxzwLiW5C_SQMeQySCyYMcBTWQob3oEqpwd5H4TUKwx2loZGS072dHsnFm0htZS1Iq_fSoLCmkksVVozshNSGUe37cAF8XvwlsQFBy05ZRi-DaBNbroJkC7IOkkvUEqVB2ZgPokKyRjVzFGNb7UtrWMP-ABVEm8QWfOuEYGKHWqI1CjCuO0EtddYe2YEKmbi33eC85pIYzIQJ8JbLB1Chkw4RJmTCKCY0ozrAW7pXroZsreqkbEMlvRi3eyAVqLDqWs4o8d2cCxm2ClqiIKylCrmRrj9nIayAg6tnRdYXMW0UKzsDAd4yYSdUaDgLG9K2TOz0UO_-MJGSrZAWIygO5N51Q6EKpeBPvv9D1cUtD4SJGlRIONsJq8LBPpekCoGzxlXRhsqmZML21pDHkBlQzkMdJBfx0I1i9VNYs8dWWh6ddc2alrP6ida7INmWUnQ6tOZCs1eg95JXvYFaqgeiqlA_MEP3lny7OvdXiogdhEaGjNopNBQbGXIp77rWA7gDsLilDaTne8m0CW2UlML1qH0lX26906E2UoEOH5jxHYY16bhhNridaybuls11C7TjxEBYcknvXFHvn29fKiLo3nc0Vu5Eq6Bi1JCSg-554ZMhtIryF-FA80-R7gawE0pyHiTbL4kvNUPwDB-IsrPCwlCSBMm2VaBB3UPohullVfwsnkZrYqcMo02QbAnn8mGgyM2USz8JDl2GtZKNDXZd0_pOekN2ZHo8A_sB3lbsPlTQhC1hylY1hHFKOO8l_G4dChl-SIp2pJ-rcSbFg-oWcnqvFG0XP6XGN6VYBBgjKVAjq46DDZKzAIxxEG3Sl2LpUcOQgzBEZ2v9zveMApxEKHqMhp-EruN1kk-WdP2k_YevignjltobtyBPswJFHm6lNgpI4xb_LXKhvnB56M-uuQE-jx57YH2uHeAknsPO6jRNX4K95UBE134R12wnCA9w3gm3F6oQl9b4UUE6GCNIPANZlrTIc-QywG9A5T2oJ4_qFyIqbvvKe95mdbZSGHg0fS4XuX_eftLbX6_rEghO8QpHvTs-O3zMs9ssDTkT3WO4E52_QU-1PM0cZNdkBJzODRZZUVPU2llMqts7xvnHrLv2o_XVEm66ztBOOwo-CjtdZ6PhbG4Y5-s6QaSUynzMrGs4ml0_MxuXHzYYl6PBfG4wKcBuVz5i0DUZDRZTga3yusIl_GROv8zmfZLvc_rjTZUeq_fETudZGFqti6iKqgmWT0KA-ixl-31c1v1Ep4QTe_1JaKM6n39OvZuUD6488_Mb-KQSvgFl7TuY2L5F8rGp8mSMVMULquKsit50xxXDI1CX9-Z_K3QLboSO53qFhMJ6Bv2caEbP7Yo7Q-0d0T8Avxi1iS1766jqdchHv5KFXzXO8Xv8-rFDx0VtcY2o00X0iKCOF0LaMSn-67AdsBH2ahn0qnIOmxPxX4VrAY1ws_l0LSGGcgJ3GtRcsm7hiyG89R44l6ZeXHKwafxWdm77gA5Jjd9jP6NjGbReiqfLOheyYYIYqW4UDLOrlJIvaoHQ8Btpg2Q7Fl5vL7-_Fm1fXGsGK59ELd-2dC9Z5Tc-k-YV2B3J3NRXwtSHQSWXQXI5qXTUYOiGfhTGei6MCqc0eUUY8JXoPqFtlaSg9ef-Gcms-vEhO1Aj5HwBOYG4-DFk1YlPTctncK-GZ0VHX3IcqBFysYCcpqt3sKw68TrcqXI2gvAnzfRvRJAdzAV3aGTlenQ3rSMHN_E8f8L1OlvBKxPEevmbrIC_DHbm3nN6_pT39vf_BK2euJHW-TYzi2kG01zLUfkWxH80Wz0fI1uz9C6Ok2hFjyHCv4zlf_To9PyPo5MstEzqepqI_OYeUd3IAZJlfVOR1kj1ssO-wYfc7Zv8JVK07ozOpnMp4pp-MB4O3m3fSdGf4OA1Jf1vIranbiR2tVQRid4TEV-i85_DUs_DyNIs6U9qnK5L_1KCkOKpkZ1GgjSgW-InqM_pG2Y2WkNT8qdfgLfDHuBbJ_qjN78_YC1wd4qRD2fFbrNL70BUm0NA1KbydzrB_tPBbWvmXCjycNs-KGbgdnhyO2lUgXtEfuvO0OAHDftgmr2n2xsp-Rd3VnrFvB7e0-ei1bTD5xxspdBdYwfQZcN96b8N44tHqHag1ouBypNkNbVpB6W34AHMab8Yj1cvxY4JeI7qF3dweQ1E0f0Xf9gye5I0qbqVFfwLxA9q3RC1A_ODSp-J2L1UZbIdMoqJ3TeoX4pxwwH_GwKbbiaN6jS7h29Qb4X5uhjy-7pPqu3YXT9pA02_-P79Gn2HXo4XFLyaxqAw2z2lWYSjAt7C4-XjzgbcMwt_mPdvwRYi3Fzf9GcEx45rPcjRhdluKsuiuqB06sJXojRsrm_mAK-hIb3-hgcI_u8RofZgDlDnB1vWkXSdvzDZekH7ye6ftgwaz4_OZbrOR4CzvUWal7AuiinAK2UH9TDlpgiPjs33PmLDc2xpBBjm5PnePrm3OCi8zN_rzhxbpx7hiH-W66YFKct8hr9HOrpxL_uXSmaon7l55BDRIxtxz9LWiEKRQI0ojW_71-YmeY5S5MlG72TrX6Mcnln1YW5WNjw3OzJ8j29Ev1qgjyAnaKB6G9-4OT_x4bohnPvHC-4B0UuuLFYta6MPdrOTqUqxe1DPF_gkm4eBdE2gcGRMjA5H47fK8enu-il2yD4p4bwk9O62FhbmKBHfcS-XbbyVTUNEtZytL47bYSWTbqEm8w3IuD4f1q5Dg9tb-vgYx_6iJJpRu865FxochbPKtuDWKMKMHm4vzBHOrfztRu9w31aZPPJ1wvGEuyYBXnPSlBUJ8HqkCufDofqvsnxhMNbLA3FIpqf2Lx17H3Lga1IDf5px-fa4HXUt91hHqS_W8jSPqhr9f5aF5fq0JcqcRq-Pf7FYk2kM1ausufEiz9a-gcpZoF40tBVey4zfqLqZJSkTx46WAViHDyJKlylKhTP4KB2_ylK_zsWvsvzMtHltC_As_h7GvvWnJ_1x0nvpm27M_joSLU0jifM0KovTqli9Bvhi8nmWAryw9r9G_t9I4lGzT0fMSBterNUZThIPccg1BtgucGyenZm9thIfMbuwmEbEs5wuKku8wqn7OsHxuvRGxy4X70Phoio--IKVazIaXC0NQhqh21vb5lYbosztxKF3dwHppItsmYQVyQp548ccG2u273R4Jf-kOkuqIinICZzF6yTDyRrH65P9GS3rNC3ytMhyHK_KLFnlVUpwEWV5ntCKnLAzHOFVFEfrKI-y1fo0hTqOoySt03KVr0kepBE0hPFTq79TqXYnTOsOzmIc58X6hJMSuHbfbsK4R4mD1cWJOnNfnii7nQ7SiDNt9GjCMMPdV6J8i9WFf-8OEYPCL8mf-ALDSaf42Ye_bOI80QG-6p25P8P_EwAA__9PRrIs">