<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/128143>128143</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [DAGCombiner] Assertion `Num < NumOperands && "Invalid child # of SDNode!"' failed.
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            crash-on-valid,
            llvm:SelectionDAG
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
            dtcxzyw
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          dtcxzyw
      </td>
    </tr>
</table>

<pre>
    Reproducer: https://godbolt.org/z/7aTdb9c5d
```
; bin/llc test.ll -o -
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

@g_132 = external global [2 x [3 x i8]]
@g_200 = external global i8

define i64 @test(i1 %cmp24.i.i.i.i.i, i32 %0) {
entry:
  %cmp24.i.i.i.i.i2 = icmp ne ptr @g_132, @g_200
 %.fr.i.i.i.i.i = freeze ptr @g_132
  %1 = icmp ne ptr %.fr.i.i.i.i.i, @g_200
  %rem.i424.i.2.i.zext.i.i.i.i = zext i1 %1 to i32
 %or.cond20.i.i.1.i.i.i.i.i = select i1 %cmp24.i.i.i.i.i, i1 %cmp24.i.i.i.i.i2, i1 false
  %spec.select.i.i.1.i.i.i.i.i = select i1 %or.cond20.i.i.1.i.i.i.i.i, i32 0, i32 1
  %conv300.i.1.i.i.i.i.i = sext i32 %spec.select.i.i.1.i.i.i.i.i to i64
  %cmp3.i429.i.2.i.i.i.i.i = icmp ult i32 %0, %rem.i424.i.2.i.zext.i.i.i.i
  %or.cond20.i.i.2.i.i.i.i.i = select i1 %cmp24.i.i.i.i.i, i1 %cmp3.i429.i.2.i.i.i.i.i, i1 false
 %spec.select.i.i.2.i.i.i.i.i = select i1 %or.cond20.i.i.2.i.i.i.i.i, i32 0, i32 1
  %conv300.i.2.i.i.i.i.i = sext i32 %spec.select.i.i.2.i.i.i.i.i to i64
  %or301.i.2.i.i.i.i.i = or i64 %conv300.i.1.i.i.i.i.i, %conv300.i.2.i.i.i.i.i
  ret i64 %or301.i.2.i.i.i.i.i
}
```
```
llc: /root/llvm-project/llvm/include/llvm/CodeGen/SelectionDAGNodes.h:993: const llvm::SDValue& llvm::SDNode::getOperand(unsigned int) const: Assertion `Num < NumOperands && "Invalid child # of SDNode!"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/llc -o /app/output.s -x86-asm-syntax=intel <source>
1.      Running pass 'Function Pass Manager' on module '<source>'.
2.      Running pass 'X86 DAG->DAG Instruction Selection' on function '@test'
 #0 0x0000000003e76458 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x3e76458)
 #1 0x0000000003e73e14 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
 #2 0x0000715c02a42520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #3 0x0000715c02a969fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #4 0x0000715c02a42476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #5 0x0000715c02a287f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #6 0x0000715c02a2871b (/lib/x86_64-linux-gnu/libc.so.6+0x2871b)
 #7 0x0000715c02a39e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
 #8 0x00000000039e7fd3 (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x39e7fd3)
 #9 0x0000000003aa01d1 (anonymous namespace)::DAGCombiner::visitFREEZE(llvm::SDNode*) (.isra.0) DAGCombiner.cpp:0:0
#10 0x0000000003abcc7f (anonymous namespace)::DAGCombiner::visit(llvm::SDNode*) DAGCombiner.cpp:0:0
#11 0x0000000003abf3ac (anonymous namespace)::DAGCombiner::combine(llvm::SDNode*) DAGCombiner.cpp:0:0
#12 0x0000000003ac0c98 (anonymous namespace)::DAGCombiner::Run(llvm::CombineLevel) DAGCombiner.cpp:0:0
#13 0x0000000003ac35ab llvm::SelectionDAG::Combine(llvm::CombineLevel, llvm::BatchAAResults*, llvm::CodeGenOptLevel) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x3ac35ab)
#14 0x0000000003c24ba9 llvm::SelectionDAGISel::CodeGenAndEmitDAG() (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x3c24ba9)
#15 0x0000000003c288d5 llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x3c288d5)
#16 0x0000000003c29b75 llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x3c29b75)
#17 0x0000000003c1a4ef llvm::SelectionDAGISelLegacy::runOnMachineFunction(llvm::MachineFunction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x3c1a4ef)
#18 0x0000000002da289a llvm::MachineFunctionPass::runOnFunction(llvm::Function&) (.part.0) MachineFunctionPass.cpp:0:0
#19 0x00000000033b772f llvm::FPPassManager::runOnFunction(llvm::Function&) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x33b772f)
#20 0x00000000033b7ae1 llvm::FPPassManager::runOnModule(llvm::Module&) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x33b7ae1)
#21 0x00000000033b8381 llvm::legacy::PassManagerImpl::run(llvm::Module&) (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x33b8381)
#22 0x00000000008c51b3 compileModule(char**, llvm::LLVMContext&) llc.cpp:0:0
#23 0x00000000007b4cde main (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x7b4cde)
#24 0x0000715c02a29d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#25 0x0000715c02a29e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#26 0x00000000008bb995 _start (/opt/compiler-explorer/clang-assertions-trunk/bin/llc+0x8bb995)
Program terminated with signal: SIGSEGV
Compiler returned: 139
```
llvm version: 3302bef5b41a99547f10b91d0aabe59aa3dc7fb0
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzMmdtu2zwSx5-GuSEsUKSOF75Q4jhboCc0H4rF3gQURdncUKRAUqnTp19Qh8hynKbpZhdf67oS5fnPb4anMU2tFTvF-RrElwDjyrHDz8cfAGMQby5o5_barMfGi1JXj-tvvDW66hg3gBRw71xrASkA3gK83emq1NIF2uwA3v4EeJvSv6oyZ3EFUAESNL5QAcglLIUCeCslg45bF0gJVxquACocNTvuYEUdlfRRdw4CsoEAY75qACn4qsUpAqQguH_zt-Hy1l8lUf-2Ek8XIc4AKUKcreoMjVeqb0om8yRa3fqPYTxzOCNaySeGQ5bcJdGqU_dK_1ArKVR3WO1UN5j4V4R2dyHBvQE_OG4UlXAndUklBPElhgf_H4EHKDIQb_xrtMIInbUS2SBd8VooDkUSQRAhnzWAMxFCgGPWtDgKxPQX4CsoPAOOEcA5BOklQAVXzjz63kIFPGM0IAvWtFBx2DoDp1i83ETojQGOg9rMlr1hbTj_eWI3OgqfK58onHrwHzC8CUTUE-JABD_5wS0c-gY4hB9Cp33AI5w2AdOqwqj_dHgCarnkbLI8l7hzD_D4pKbS8onQtpwFg9zrnl6EmjoLTRfhUwdp9UAQOqvsYx96-FcUPi1JdNThxKc0H1N6rNj3Tifd0bi5eqUXJtllZKfCv53uc2inWT8T7i_9vYj2O0l_rvxy0vGLSdeGoPCMmjbDTH6hm8f0n6XppQ13k8AZF37FSDeny-7RtZTMr-AAb43Wrl-JH5pVa_S_OZtuAd4KxWRX8bnhSlf8hvul-7aPXmi1KW4-64rbYA9IkefE6zKtrIO9DSkAKW4336nsOMDJotHbDdc77r603FBVAZx1qt-WKiiU8-tXr-ZlC2u58T4hSNDnroGAXMHPXTOaWghw4n0AjD-oBypFBdleyAoCTKCu4egRh369ximsqZC8CgAqvn68Lm6voe3KRjhIYdntoOGtNs7358lGJ9y-KwOmmzkvJ-kT1nbcAryFVPkw-ixCt-eQGWr3sKTs3hnKuPd96yi7h1XXtMPqjAKA8q9G7wxtIDW7ruHK2bG7dOv1mW5aIblZ8UMrteHGt0mqdis6pciunOnUPcDbeatdaS9B29YLda7tXGDh6pAlK2qblX1Ujh4A2QjluPS5tbozjANyDVAReqpvnVJC7WBLrU92uu1UPwbgV9_wiSq68ywp1Ao2uur8zonThRJOfcz4nNo_swRuipsVINeb4gZ-UNaZbtB_Gm2jeD059vLTbpgOawRBEB3Q9IfwNIni7Gjc2Uc7XHw1Qrk--3_5vgA4mz9k6I87bZ3htOkH1dU0GIEvEP6rbgD4Eh1GLIDzETo8gSY8jOCt2Ckq_0FVJb141jNcQSt2QtX6zgFc-PsHLar-Mh8tbMBaP5pQ_29wgEcHaRgzhGmEY4zGaKQoAd6Oxc1RUeMfsMDqIOmZe5OZmCwF8ySvGWzd3nBa3d0LKd-m3tvP6tEpbpQmcGf78N6KHaXJLBwvhXGW1gTS0k_1N8n2hrNs8kw2LN8sGJazYLoUJDnPk7cJ9iazYLYYYTlP64q823Ae5GZn-cIZpSis_JacUaXVY6M7CxVtuG37eZcPc25T3FzpphSq_3oBSPEgrHDbb9fX_7peTM5pHS_GCRkIa2jQ17pHGidzwM-x5cpAS8bS-s-oXub5NUF4QlATyt5MwIa7P2XASwaGWJ69meFbpxb-x6cf-QOXryOQEwQS0_K4NDgqLhbyv3B5dWR_SR3bF8U3bjvp7LhKHhv2VcyX1j3hvtc8GEIZ5oEPNFoEynBU0vyFQD_ccrngK1R13Qjnc-Dp3g9ywJgh4xPILKviVyGH1kLKS2oFu5Sa3dtF9zwVB0P95nfR9wzBQ84hJCch5GX6egimU1_UJ8r2QvGJdhHCs2fvHIOnnGNIlzGENOL1L2L4yHeUPf49IulZ50gWWw2uKM5yCl-E8cXjURhn-Z-DBy01blj0z-idWXOWWxIp0xQfp3f71dtNNeybcd4ljwPUUx4xOkWmPPwN5E996b3s_7HpvXEpD2fc8AQ3I9kxrjwasEfgH5p2no__D2iPNUMvdkOUsTgsCRwdPCWS7anpt5GTneTjx--frrRy_DAtcFKy52MPL_Y7lJYRqzhsqFDvFdYgOUd1Uj7jvMrfWO33JrPgadmc8wjBuztvc2cdNe7uKJzfdsGjIxfJsifKMs9jOIi_V5oG0cHl9BXbcdMIRR2v4A_h9nD4juG_b99-uLm9vvkOkC81epfQcNcZxSv_OCT5s2OVhwY-cGP90kAKSAjCJa_jMgppnsdRWoeozMMKUVryOKeUVCytS3RRrUmVk5xe8HWYRijEOMP5xX6NMh7isk6SmBNW1VUSpkmdxwhzgtK6yi_EGiMcI4xDlOIU5QFHSVIxktEkRyyiCYgQb6iQgWcLtNld9IcT6xBnYUQuJC25tOMPAP3hxEqrVX920h-SXAGMx-G-KMqG3wjMuj_4KLudBRGSwjo7-3HCyf6nhePaMd78r05xLjoj139-UjPm42GN_xMAAP__ROhuug">