<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Issue</th>
<td>
<a href=https://github.com/llvm/llvm-project/issues/131359>131359</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>
clang crashes at -Os on x86_64-linux-gnu: Assertion `... " VPlan cost model and legacy cost model disagreed"' failed
</td>
</tr>
<tr>
<th>Labels</th>
<td>
clang
</td>
</tr>
<tr>
<th>Assignees</th>
<td>
</td>
</tr>
<tr>
<th>Reporter</th>
<td>
zhendongsu
</td>
</tr>
</table>
<pre>
It appears to be a regression from 19.1.0 and affects 20.1.0 and later.
Compiler Explorer: https://godbolt.org/z/K3Y3zn4hP
```
[515] % clangtk -v
clang version 21.0.0git (https://github.com/llvm/llvm-project.git da3ee9763266f9adedaac1b1b3162d14f951fc55)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/software/local/clang-trunk/bin
Build config: +assertions
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/10
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/9
Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Candidate multilib: .;@m64
Selected multilib: .;@m64
[516] %
[516] % clangtk -Os small.c
clang-21: /local/suz-local/software/clangbuild/llvm-project/llvm/lib/Transforms/Vectorize/LoopVectorize.cpp:7574: llvm::VectorizationFactor llvm::LoopVectorizationPlanner::computeBestVF(): Assertion `(BestFactor.Width == LegacyVF.Width || PlanForEarlyExitLoop || planContainsAdditionalSimplifications(getPlanFor(BestFactor.Width), CostCtx, OrigLoop) || planContainsAdditionalSimplifications(getPlanFor(LegacyVF.Width), CostCtx, OrigLoop)) && " VPlan cost model and legacy cost model disagreed"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0. Program arguments: /local/suz-local/software/local/clang-trunk/bin/clang-21 -cc1 -triple x86_64-unknown-linux-gnu -emit-obj -dumpdir a- -disable-free -clear-ast-before-backend -main-file-name small.c -mrelocation-model pic -pic-level 2 -pic-is-pie -mframe-pointer=none -fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -fdebug-compilation-dir=/local/suz-local/software/emitesting/bugs/20250313-clangtk-m64-Os-build-082148/delta -fcoverage-compilation-dir=/local/suz-local/software/emitesting/bugs/20250313-clangtk-m64-Os-build-082148/delta -resource-dir /local/suz-local/software/local/clang-trunk/lib/clang/21 -I /usr/local/include -I /local/suz-local/software/local/include -internal-isystem /local/suz-local/software/local/clang-trunk/lib/clang/21/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/11/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -Os -ferror-limit 19 -fgnuc-version=4.2.1 -fskip-odr-check-in-gmf -fcolor-diagnostics -vectorize-loops -vectorize-slp -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/small-d02bf4.o -x c small.c
1. <eof> parser at end of file
2. Optimizer
3. Running pass "function<eager-inv>(float2int,lower-constant-intrinsics,loop(loop-rotate<header-duplication;no-prepare-for-lto>,loop-deletion),loop-distribute,inject-tli-mappings,loop-vectorize<no-interleave-forced-only;no-vectorize-forced-only;>,infer-alignment,loop-load-elim,instcombine<max-iterations=1;no-verify-fixpoint>,simplifycfg<bonus-inst-threshold=1;forward-switch-cond;switch-range-to-icmp;switch-to-lookup;no-keep-loops;hoist-common-insts;no-hoist-loads-stores-with-cond-faulting;sink-common-insts;speculate-blocks;simplify-cond-branch;no-speculate-unpredictables>,slp-vectorizer,vector-combine,instcombine<max-iterations=1;no-verify-fixpoint>,loop-unroll<O2>,transform-warning,sroa<preserve-cfg>,infer-alignment,instcombine<max-iterations=1;no-verify-fixpoint>,loop-mssa(licm<allowspeculation>),alignment-from-assumptions,loop-sink,instsimplify,div-rem-pairs,tailcallelim,simplifycfg<bonus-inst-threshold=1;no-forward-switch-cond;switch-range-to-icmp;no-switch-to-lookup;keep-loops;no-hoist-common-insts;hoist-loads-stores-with-cond-faulting;no-sink-common-insts;speculate-blocks;simplify-cond-branch;speculate-unpredictables>)" on module "small.c"
4. Running pass "loop-vectorize<no-interleave-forced-only;no-vectorize-forced-only;>" on function "main"
#0 0x0000563ced471fcf llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x4577fcf)
#1 0x0000563ced46f7a4 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
#2 0x00007f1c5b61c420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
#3 0x00007f1c5b05300b raise /build/glibc-LcI20x/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
#4 0x00007f1c5b032859 abort /build/glibc-LcI20x/glibc-2.31/stdlib/abort.c:81:7
#5 0x00007f1c5b032729 get_sysdep_segment_value /build/glibc-LcI20x/glibc-2.31/intl/loadmsgcat.c:509:8
#6 0x00007f1c5b032729 _nl_load_domain /build/glibc-LcI20x/glibc-2.31/intl/loadmsgcat.c:970:34
#7 0x00007f1c5b043fd6 (/lib/x86_64-linux-gnu/libc.so.6+0x33fd6)
#8 0x0000563ceeecce93 llvm::LoopVectorizationPlanner::computeBestVF() (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5fd2e93)
#9 0x0000563ceeee48a6 llvm::LoopVectorizePass::processLoop(llvm::Loop*) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5fea8a6)
#10 0x0000563ceeee72a1 llvm::LoopVectorizePass::runImpl(llvm::Function&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5fed2a1)
#11 0x0000563ceeee7943 llvm::LoopVectorizePass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5fed943)
#12 0x0000563ceea5a6d6 llvm::detail::PassModel<llvm::Function, llvm::LoopVectorizePass, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5b606d6)
#13 0x0000563cecde27c9 llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x3ee87c9)
#14 0x0000563cea6cc7a6 llvm::detail::PassModel<llvm::Function, llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x17d27a6)
#15 0x0000563cecde1032 llvm::ModuleToFunctionPassAdaptor::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x3ee7032)
#16 0x0000563cea6ca3b6 llvm::detail::PassModel<llvm::Module, llvm::ModuleToFunctionPassAdaptor, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x17d03b6)
#17 0x0000563cecde0a51 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x3ee6a51)
#18 0x0000563ced72fe4a (anonymous namespace)::EmitAssemblyHelper::RunOptimizationPipeline(clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>&, std::unique_ptr<llvm::ToolOutputFile, std::default_delete<llvm::ToolOutputFile>>&, clang::BackendConsumer*) BackendUtil.cpp:0:0
#19 0x0000563ced7338a1 clang::emitBackendOutput(clang::CompilerInstance&, clang::CodeGenOptions&, llvm::StringRef, llvm::Module*, clang::BackendAction, llvm::IntrusiveRefCntPtr<llvm::vfs::FileSystem>, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>, clang::BackendConsumer*) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x48398a1)
#20 0x0000563cede73d91 clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x4f79d91)
#21 0x0000563cef8016dc clang::ParseAST(clang::Sema&, bool, bool) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x69076dc)
#22 0x0000563cede741b8 clang::CodeGenAction::ExecuteAction() (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x4f7a1b8)
#23 0x0000563cee14abc9 clang::FrontendAction::Execute() (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5250bc9)
#24 0x0000563cee0cbece clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x51d1ece)
#25 0x0000563cee23f996 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x5345996)
#26 0x0000563cea25f9ed cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x13659ed)
#27 0x0000563cea25715a ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#28 0x0000563cea25b3c7 clang_main(int, char**, llvm::ToolContext const&) (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x13613c7)
#29 0x0000563cea1400db main (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x12460db)
#30 0x00007f1c5b034083 __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/../csu/libc-start.c:342:3
#31 0x0000563cea256bee _start (/local/suz-local/software/local/clang-trunk/bin/clang-21+0x135cbee)
clangtk: error: unable to execute command: Aborted
clangtk: error: clang frontend command failed due to signal (use -v to see invocation)
clang version 21.0.0git (https://github.com/llvm/llvm-project.git da3ee9763266f9adedaac1b1b3162d14f951fc55)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/software/local/clang-trunk/bin
Build config: +assertions
clangtk: note: diagnostic msg:
********************
PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clangtk: note: diagnostic msg: /tmp/small-7bdf6a.c
clangtk: note: diagnostic msg: /tmp/small-7bdf6a.sh
clangtk: note: diagnostic msg:
********************
[517] %
[517] % cat small.c
int printf(const char *, ...);
int a, c, d, e;
static int b = 2;
static void f() {
printf("0\n");
for (c = 0; c < 3; c++)
if (d && c >= b && e)
a = 0;
}
int main() {
b = 0;
f();
return 0;
}
```
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzsW21z3KiT_zTkDcWUBJrR6IVfyGPPbuqyl1Ts3a17NYWgJfO3BDpAfsinvwJJnoc4iZM497B1VY49QkD_uvnR3TAd7pxqNMAZWp6j5cUbPvgbY88-3YCWRjdueFMZ-Xj21mPe98Ctw97gCjDHFhoLzimjcW1Nh9NikS4SzLXEvK5BeIdp8tTUcg92gVFSoqTcmK5XLVh8-dC3xoJFrMQ33vcOsRLRLaLbxsjKtH5hbIPo9hOi239j_8E-6ezmwzgHWiXTT1Ki5fkyXaLlBUZ0iUXLdeNvMblDSRkf8B3YCJSmi2SRNMpjRNcnApW_GaqFMB2i27a9m_-Q3pp_gfCLMEpyBlDkK0ZXq7rgEiTnIq3SiqUrKtOsLpZpLZZLRAuUlNfcNuCDbg_r1W6VkUHfanOvSav08EAaPYRONxa4xJ2R0IauvXHqASXlW-08b1uQFyqaJ8AxgreIbt3wiTx9NrW_5xYOXkeVibeDvkV0WymNkvJ8UK3EwuhaNeNs59w5sF4Z7VBSbs2gJRZcSyW5B_zbZoPViICHPhOCwdkgSFXBYEIgup0022tEt2ny2hOmrzxhWJwraEF4kD-PbPOEqRtar8IQVuIFYucoS7pVdijsiz0ihVczhT9reOL0e4ddx9t2IWZyE5q-jB-xdxWIcELtA8JHda8t1642tnOIbv8C4Y1Vn8IM74zpn54Xou8RK_NlngX5cQZWIlbOPaI1tzw8HLw9nCP2-NByraMLQKwUpusHD-fg_F9bRNdhI7ESlzNXcdjwdB3ejzMv_lbS32DELhC7wO-g4eLxr-3cmm9QvsFBwtbYS27bx8sH5QOE-V3fcr0x2nOlXSmlCkJ4e6W6vlW1EnzcIHTdgJ-meUZ8QEk3eGOc3_iH8PG9VU0Qg2jxU5KOFfqqnCiKrhBdYUQp_itMgoVxfvQtoxeO0x22SuV4YwEkohTRHNdctSAXKCk_vLssry6xG6pOecxxNTTYQm-sDyHg-5wnolvl3ACBUBGI0qIdJGB_A1hY7m5wxcWtt1xAUKu30FsjwDmQ2JnBjs0xtjhnhOJhM9lBYyes6n3Ae-W5uMVy6AIrUVImC5QUH6xpLO8wt83QgfbuZ13p3EZTTIRIMfFW9S180cNjAp3yxFT_wiRgk8piTjAJdq9aILUFwES0wC3hzpMKamOBBGuAlph0XGlSqxaI5h3Mex-TzkIAGUhDxpXslcCkV4K0cActpuODcqRXgElXW94B6Y3SPmy2C200YFJ33N8QsFYbTOq6J8LosAoesQujMam1ITZ4XqUbEvpi0gmjnbdDoD_hreIOHCb1oO-VlsQHrRxiFxQTH-MfEf0QzENWGSZ-0BAbGtBgA2IJ1dA0YMMrpRvELhpZYVLHdiJipjCqKUMgvPj24gWDg_NhMrqthiaQjiZ0mbCUkcmRkm6VkfeORHdIkjVNszWiWwmt55jUwtyB5Q38D8m3MHI-iPxhto6-PLYFACkmbw_i2jRk3ofjuxfKeRoUuaR5S5R7dB66V8P6LSFfUOIrXb8Zx-l2sfj81zN9P5cGD-GD-Fzq1PWZeb4--vtFxMSA1GCtsaRVwWOnBSZ1owdBpuwXsYtsQRcpJrW7VT0x0hJxA-KWKE2aro68b40lUvFGG-eVcJjczfGetMb0Rw2u7TGpuZTWqQaTi93ut81m93v51-Xu4u_y45buNtu3u_LqD8QuUkxMQO27PhAiuDEiE1rV2cJg8oDFQVqTBs-N2AZMjdgl7rl1YDH3OHhEU-PgDlFS0tDtfe9Vpz6BRUnJQsPHQQc_gnvuXAiE9aDFmNZtgAc_o_QdYpeIruvWcE-V9ohuWnMPlkTPxrUPdrdKOyVcfBfi6zr8IdZ47gGxzQ1wCZbIoW-n2I3YuTYkRC5ugdRhHbyJkuIMREILsV8M4mOTct6qavAhuikdIiXxrSId73ulm1n43uSIbbQZWdECv4tiBEhidPs4yt-vzvGrEYjSNUSn3egQDef5W8MlgVZ1sYvzwnSV0kFaxx-I8mCn7IRdpLMYq-pHUquHGFHG2d2YyzyKukFsUxk9OBKmI_7GgrsxrZwmqI2951YSd6-8uAlml4idT0-W6waIN0SJEMrnZm8CAW-HfgRwC9CPjETs_MYo54Ov7oyOEt3YaWwP2jnivLHgyL3yo0BS85CLh4hz7pS-PR3uehBDOLWSqjXiNjZN-o3jK8u1uBkF7TsPurcglZjjYLRLe7CEFtHN-EBmM_-U0eMCDtqatkVs856OrX5O4ck9tzGu0o2zhiO26S04sHdA4jI9z4qfxdM5x8OWUaJDbMPb1tzPJoo75XLcBE8iSW1NR7hzQ9dPefA4UViZCc9sfUQ3Ut0RCx3pubKhq-eqFeGwPFL4xTzUhnwXFcNKf87GIyo-se6ETi-lYhDxU2z8KhWLcDIwOuT-QwvBPc5el1KUlNlzDvRVPVCUPrvkMHvIb0fhGFGW4OQhSZJkuWICZJantagPzo7u0Y0fPlilfUz4r8cjw3rfyfL7nXHeAu_icSic7v14OFq_TuaP6HnykC3zvBb1eNMTsKfH2Fd1zjN8pRrN29-5lm3Y-esx2mCnGqVrs_OIluH5zigZPxbTCDedrpP4bxRAJwF5nYpltUpFRhO821mIfNpZP2sYc51nMpdWVb2P100LZxZJVCPNMprslWBHMpIlS5IKW65cIMt2vjxoWlUJ8k68pcnD0yNdsJBFuYh_zp_co5PQhwx40OphbLiLUPQQHuPUC4FYuUwRK9MJRnYMg9H1ssC8MlHHl8HwcrRDHBUlrIOEfJKwPJWQ0wI34Hcj4p2DJjim3R1vhxfrrrRvI4e47Fwj-Ch3GZKZcj0JXj0neKfbXRi1kyZsiJ-TV-SBNSybBObHAjNWy9ULmCICR1aRIywM2XNkfUh0ACGgYD9zwfPKG3NZSwoF2-MtjvFCtuarL-CFD9xNLma6f3g3JX9H3aet-tq4ga_5ZOfgT5IT3Dnl6bdx20G_7fr2CPN2zoGDP_wFuCXl6R53eoq7yL7Ej2PcX8a8ORhfat4-OuX-4Drk84htnhkUYs0v0rXI2F5XeqQrX_KVPOSWhJCaTDGLO_fHeMv_HOIjHT-30Q-ZIPz837FttUpW8oD_7NC2QgLNRXGANdrzazj_-SZjAOtcFHuTZYcm4yshcv4adPxlpv7nL1GaS5ofevXlCavThNEDrH_EzPzazLiC6UvJe2_s81qPA75L52nIryNlnjC613h1QkrOqu8j5azi5oV2-gFDfIlT_-usm-YyYdUBn_ITPiV8mb5g6z5n03-YqRjAii8PEpOjxFXmtIaMB5lcG_3YmcFhzTtwfTxRFiPEy0750jnoqvbxd2j7OY_9OOjp6nHMcVUPbbzLWY-32LHT-fgtTvnkJJ2X45tBq_8cYNf7Y4OEs2t_b5WH3XyCPRgkIV4U7OJNInxj4ORgVy8Re21M-37w_eC3aiTFS2SejDoU-LkNNka7oQtn4Jg6T61_etWenHTDQhXHC8XYmqeHc0Kn_DTDCODY7HN5SSyh0AI-B7UxEn6DuILxsumEs1feKt18hPo5nzMd2b-2zPshb7W3g1N38BHqjfYfTgx_V0_Zb7DgVbzan8Lifz9TXrBqr3yDsmbF-uDgQI9vfyBnski_Bio2jncrsWRhvF38U6sTPpRX1xujPTz4X-JnsjovZHGgx9EBqF4n6UqKQz0-cOugvLo-RnkFHZ-YWBnT7v--Nt5VkeQrKfZ46Ynds7RaP7NbJn6PbvEBxOBhpvwvOMZndc7Tar1HeXQcgDTjlSgOUW5tWOOnbXgI89fcM9BlUh0k3_Qo-YZEVCAAf80tPWvJL2v0Sw5dqUxhDHejEkfpKVBWF8XqUIkJ7l6Xu6kK4Vsu-FfcmLBsWRT7XIgeZ5p0WRcgsRDpbrxlPkhWSmv5Y3DwbCNuuMXxm78AcvKER23HF7SvnM-x1bIAudchP9EhT5ccz1bfpNfRJRxoctXxth3vCuK9z3MKnYS3MMfkEOd-kVrSqjuwn8djuj7BVDGRj6SYLTvdawfR0UzlyyS-ui1TJvK9LY_yCJ5mSSIrPF2wvqpgmq0SWT0JfvoeY77kzZI1w7tdqyqxc55bv_uea17hhvk-ffwYX8Z54oUvy2j4PclOTxZrVQHgUeqr23spKpicx1TYgliJYxVC-DBoXrWAvcEwEhgL03Vcy1jTVxnrQX5h6Fi3W08ecB43ladhOcRZx-8aglaDA0zuYhsAVgdeqfj_IuCXFgEfrIM2IW0s8b4UBHduHJSU8w7_oZ9YvD3VFpbX1-Xmd3z9-yXevn_37v3fb__9N7x9--7yCl-_j83nf_6GP15-eP_xeizq-_BcYeDaBV_yxeLApw4WcKyZA4m5H-d7mcrHZSt5JesV3xfg_thwd_M9Fv95oy_Pl2l-Wl_81CC4PyjAUdrj3irt6xDVg78eI-Lk1xfBFRWInU9deXT94ZcMv2B84zwPSoQOFUbsAtOj9hBRcT1nZnl4s5eJKE3QchO_GZ4lYVybAGEt4mwJYuc4fNxgFj8ieh5_4tc-GGNVh85yrokNXS_DwGpumRwX5k_zBbPkF5NWU2Q7gDfpkTzhmQuUx0cLfrD6eKKj_6WQlG_kGZMFK_gbOEvzLC3yNKP5m5szBlAVOVR5laZilaVJXcMqLYDWOV-zNbxRZ1MJYZaulnmSL5aJ5FmdLGFZMLnmHGUJdFy1i-CvFsY2b2LF7VnKUrYs3rS8gtbF_-VB6VRoR9Hy4o09iw4u1ilmSaucd_spvPItnI3uM5bpgsPcx2Izo_FnXxyeVmovFoufr0V-M9j27MfLjSf9787ofwUAAP__WY0pfQ">