<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/129416>129416</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [mlir] Crash when using --loop-invariant-subset-hoisting
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            mlir
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          wangyongj1a
      </td>
    </tr>
</table>

<pre>
    I have the following MLIR program:
test.mlir:
```
module {
  func.func @func1() {
    %idx1 = index.constant 1
    %idx0 = index.constant 0
 %alloc = memref.alloc() : memref<7x7xf16>
    %0 = scf.for %arg0 = %idx0 to %idx1 step %idx1 iter_args(%arg1 = %alloc) -> (memref<7x7xf16>) {
 linalg.copy ins(%alloc : memref<7x7xf16>) outs(%arg1 : memref<7x7xf16>)
 scf.yield %alloc : memref<7x7xf16>
    }
    return
  }
}
```
The above MLIR program will cause a crash when using the following command:
```
mlir-opt --loop-invariant-subset-hoisting test.mlir
```
And the crash backtrace is:
```
mlir-opt: /data/tmp/v0302/llvm-project/build/tools/mlir/include/mlir/Interfaces/DestinationStyleOpInterface.h.inc:147: mlir::OpResult mlir::DestinationStyleOpInterface::getTiedOpResult(mlir::OpOperand*): Assertion `resultIndex >= 0 && resultIndex < (*this)->getNumResults()' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: /data/tmp/v0302/llvm-project/build/bin/mlir-opt --loop-invariant-subset-hoisting test.mlir
 #0 0x000055fc235b42af llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x168d2af)
 #1 0x000055fc235b1304 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
 #2 0x00007f43c2e33420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
 #3 0x00007f43c290000b raise (/lib/x86_64-linux-gnu/libc.so.6+0x4300b)
 #4 0x00007f43c28df859 abort (/lib/x86_64-linux-gnu/libc.so.6+0x22859)
 #5 0x00007f43c28df729 (/lib/x86_64-linux-gnu/libc.so.6+0x22729)
 #6 0x00007f43c28f0fd6 (/lib/x86_64-linux-gnu/libc.so.6+0x33fd6)
 #7 0x000055fc2a06c423 mlir::detail::defaultGetUpdatedDestination(mlir::Operation*) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x8145423)
 #8 0x000055fc24489dee mlir::detail::SubsetInsertionOpInterfaceInterfaceTraits::FallbackModel<(anonymous namespace)::LinalgCopyOpInterface>::getUpdatedDestination(mlir::detail::SubsetInsertionOpInterfaceInterfaceTraits::Concept const*, mlir::Operation*) SubsetInsertionOpInterfaceImpl.cpp:0:0
 #9 0x000055fc26647143 (anonymous namespace)::MatchingSubsets::populateSubsetOpsAtIterArg(mlir::LoopLikeOpInterface, mlir::BlockArgument, bool) (.constprop.0) LoopInvariantCodeMotionUtils.cpp:0:0
#10 0x000055fc26648882 hoistSubsetAtIterArg(mlir::RewriterBase&, mlir::LoopLikeOpInterface, mlir::BlockArgument) LoopInvariantCodeMotionUtils.cpp:0:0
#11 0x000055fc26649476 mlir::hoistLoopInvariantSubsets(mlir::RewriterBase&, mlir::LoopLikeOpInterface) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x4722476)
#12 0x000055fc265b9292 _ZN4llvm12function_refIFvPN4mlir9OperationEEE11callback_fnIZNS1_6detail4walkILNS1_9WalkOrderE1ENS1_15ForwardIteratorEZN12_GLOBAL__N_127LoopInvariantSubsetHoisting14runOnOperationEvEUlNS1_19LoopLikeOpInterfaceEE_SD_vEENSt9enable_ifIXaantsrSt11disjunctionIJSt7is_sameIT2_S3_ESH_ISI_PNS1_6RegionEESH_ISI_PNS1_5BlockEEEE5valuesrSH_IT3_vE5valueESR_E4typeES3_OT1_EUlS3_E_EEvlS3_ LoopInvariantCodeMotion.cpp:0:0
#13 0x000055fc265b852c void mlir::detail::walk<mlir::ForwardIterator>(mlir::Operation*, llvm::function_ref<void (mlir::Operation*)>, mlir::WalkOrder) (.constprop.2) LoopInvariantCodeMotion.cpp:0:0
#14 0x000055fc265b97da (anonymous namespace)::LoopInvariantSubsetHoisting::runOnOperation() LoopInvariantCodeMotion.cpp:0:0
#15 0x000055fc26578df1 mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x4651df1)
#16 0x000055fc2657929a mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x465229a)
#17 0x000055fc26579e34 mlir::PassManager::run(mlir::Operation*) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x4652e34)
#18 0x000055fc2656b48b performActions(llvm::raw_ostream&, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, mlir::MlirOptMainConfig const&) MlirOptMain.cpp:0:0
#19 0x000055fc2656bef2 processBuffer(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::MlirOptMainConfig const&, mlir::DialectRegistry&, llvm::ThreadPoolInterface*) MlirOptMain.cpp:0:0
#20 0x000055fc2656c164 llvm::LogicalResult llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&)::'lambda'(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) MlirOptMain.cpp:0:0
#21 0x000055fc26670a1e mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>, llvm::raw_ostream&, llvm::StringRef, llvm::StringRef) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x4749a1e)
#22 0x000055fc26562d79 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x463bd79)
#23 0x000055fc2656c2d1 mlir::MlirOptMain(int, char**, llvm::StringRef, llvm::StringRef, mlir::DialectRegistry&) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x46452d1)
#24 0x000055fc2656c796 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&) (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x4645796)
#25 0x000055fc234cecab main (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x15a7cab)
#26 0x00007f43c28e1083 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24083)
#27 0x000055fc2358502e _start (/data/tmp/v0302/llvm-project/build/bin/mlir-opt+0x165e02e)
Aborted (core dumped)
```
My git version is b6d5fa05ada6e51ede32c62ff47f046ca5085d28.
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzcWltz4yja_jXKDRWXhNDpIheKI8_4q5wqTte3NTcqJJDMNAYtICf-91tgxZbddpKeyc7OblfHkTk87-nh5UUEa81aQemVF1170c0F7s1SqqsXLNqNFO3vAb6oJNlczcESrykwSwoaybl8YaIFd7fzJ9Ap2Sq88sLc83NDtZmsOFPbr17sD__9fCVJzynwkmvPzwFoelFP7AfwkG9_Bx5MPZjtBgDgwYiR1wB44Q1ggtDXSS2FNlgYEBwM8U8NsTJtP-Zc1m7Aiq4UbSau4U1YmA_NXjhNXpPXJoi9sNijb6F13UwaqRycardtb6KN3CmqDe12X5ihqsSq1U6UnRe8zRs0yMClFxbAg-kpFfau4Exg3k5q2W0AE294g1mn9YcZkL05FH1upBVhDdwwygn4EHpwTXIzPClqeiXcl23j8DkK_fOSAlzJNT1gDHhhnIMa95oCDGqF9RK8LKkAvbbkOqRaLVcrLMgJWnGmLmVnwOUll7K7ZGKNFcPCXOq-0tRcLiXTxgHuuHmIkAvihG01qHD93ShcU8D0eWnWOR6cEWywB2dm1XlwtvZDH3pwxvl6ddkp-TutjQdnVc84sYOk5NqDM6cBnDFR857QfcNcGKoaXFM76IZanbFhUizMhtOHbtc9WU6YqL0wD1DiYjSstjB_6J6o7rkZNb2Dsx3QUvPMKHmbark4wnvoqLJeh7nlSZiDXGuqLBrwYl-5KXO77IBlRngDfODB2IMxOOybAsfE3CyZ9mBmad9Sc9-vtlK3PM08mIAGM07JxPPzx9siXxRA99WKGYBB1bdA0U4qY5fc0pjOxQfOPDhrmVn21aSWq8H_P4aBad071wIsCBi8fyruVvbC4Po7IP2q21LAnwD373FgLlZtv6LC6D_Ag4qJIeg_T1vgwdAH_qvv-34UNTUMowpB3ABnswua3ujtw6NiwjhDnq1ZHkz3gxR-KaU2iuKVi9cUMGFcxrGB-BPmePDafw3ilEDcDKnFg2FwpHIQ-ggsWCsw_xULwqnyYOo0mALNWiYaWRpHuilYSzbwb5ihJ3Vnw-K7n60AOAhIGhTWkIYhgj4oS0W1kYqWygyGcVZ5cPaaxmWMLjkT_etlK_ptR2eWimIy0XLib81ACPp7I8IDGZl9rIDCTNNPgNcWNnawKPT9ag-LDmBT0qRRZpPlp3QewUKYRtkeNjqGTXbR_TRgAkeA8SFg4zck_jnAMGxIvAdMxqTAflwjGI4yF6EGM_723OCem1-o-dYRbCgZpbWjjEXV0Jp_GZ3TAEUIhnvN07HmCKUZofSM5gu3mOdiyJqj9Lt7eFaYmWHNzjDnNhHdSUK5F049mGIhxWYlew0EXlHduaWcbYffusJgKrvNQV4vdqn9A3f9CU2nUtS0M8CVW8NSPR-Hd8BXHT-xoLOxi-MYJQEKwQfeuMOmXjLRboUNenay6zk2dNv40OnczA1VuWoPPHErZXfLvh_sjwcWXXNZf8-HtG-7Kin5QLFtzdkp2dnMkQELNn_L51NJ6J20Vn8z7IfkZZOjf2RrmqYQuPS_Vfq0xk_0RdkS8xprOuTwP27OT-scHOmcoSQewTvtDyDfgvLnTPiiFY0SCFEy5CJrDjwwJ6oymEFQ_naPLGYA7fHEeqNUtJnP1o_3yMJlO5YXRREE9bB2y0bMf7tfBGW8XV7oBfPv81vbkv0_5t8fFKGqCArbEEQzqV6wIjbC2EhV_HYfwPKX24fr_LYs78sAJifc-OtQGwRI9eJB7PVYF9-4w81OuK8oysVNuS6K-4XJqMAVpyVr5v_AWBitFiYICNO_D6bO_29hEqZLjVd0_gzLRVgWi1_L-WJePjrjnmjrLB83Ro5WRVEU0Rrznmple5_Dcj00FIunskBm09FiEZYPz0FZfOMWuiyKtX04x8MTFAyPYpZGsHbVwplUbMPghdN955Hr3WHo7F4yHZVYYzp44dTJfG8bcshjbu9o8GMCge8sxhNOQMfETQj-KE--Q6ihOjwg1XBS_rxO0aFOSUqa4ExMHrpn-dA9Yq1zgjsXhEGBA3_aAR_sMeOeXGC-0UzfYYFb6-S3bD0FvXCvO8iX1rsojgLSBPt0Eh95IIMZ_mkPPLKOciboEbPs0J1h8Ze7ZDzJipoLbZTbJaT6AfVwwFbytmPQ_RErKsxcNHJUKHyd1yHM8N7rybHXaYiOlH0z_yTL_i3Fo9WShmivZXqoZVyhtAIdVY1Uq9ylFf3BUU0bMhz1llhRUnZGeeF0P2Mhe1XTu9ZmtDe3HxHl7nb-NJXC0Ncfa7c7ztRDZ-4wE1MpGtaOMDIw6j2x9LNj42gDQadkTbW-7pvGHfQ-ZVsv2D97-oNtd3Ql1eYNajR-OCKUhHJq6Pk5tjguPm_weNwNw5zWxm582qjN0L-X8-zOj49S8lHFkn_oNOgfOa0OYjSCvZUtqzEfXu2c3YXOTfBg-tc59Xxos92xZFQnHWzHIyf9DUlyOvifXDXbIR5MOF5VBHsw-TtFBaZcivavdew7Kn2wWo5OHomPg_HhW3ecmVyQx6Ok858w7b9whb47Yty3MIqJ9ok2Z5u_7KyGMhzQ3QYKj85qMSRJdnoh_q-lka-qSMKKJNneoeHx_gNJcNahQ5FYL_G2HMx_lhYfeePLrEQRJPuaHKJjK5Ms_hIr_zJzkmz_xgIeHLJCVNMaV2CFmfiiV_gRTmpc7eUdvf6lgZ-GoCw5q-pSG6xMORL-2TfMyE_DvYjk8JYgjXxIwRb8q-4lIurDIZXklVSGuoN7LRV1lz2UDNqMbvzuNqBlBqyp0kwKwDSoYhI12I8wwTGNAkpoCOsYNg1KGh_FNY78NCIwnVyQq5BkYYYv6FWQID9NsyhJLpZXGEOUohr5QZRUKMlITHBIYYPiMEmqJLhgV9CHkTXQRzAOkkkS0ybBEQ0ykoUoTD3k0xVmfGKtn0jVXrj7rasAZiiILziuKNfuTh_C7f0i9KKbC3XlvFX1rfaQz5k2eo9gmOHu7wDchOgGTI-vZD-6q7roFb_64zdzg_LrK_ivAAAA___BeSRX">