<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/155738>155738</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [IPSCCP] Use still stuck around after Def is destroyed
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            ipo,
            crash-on-valid,
            generated by fuzzer
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          dtcxzyw
      </td>
    </tr>
</table>

<pre>
    Reproducer:
```
; bin/opt -passes=ipsccp --funcspec-min-function-size=1 reduced.ll -S
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

@g_315 = internal global ptr null

define i8 @func_123() {
entry:
  %call2 = call i8 @func_152(i32 1)
  %call2991 = call i8 @func_152(i32 0)
  ret i8 %call2991
}

define internal i8 @func_152(i32 %p_153) {
entry:
  %tobool268 = icmp ne i32 %p_153, 0
  br label %cleanup424

cleanup424: ; preds = %cleanup424, %entry
  br label %cleanup424

for.end453: ; No predecessors!
  %0 = load ptr, ptr @g_315, align 8
  %1 = load ptr, ptr %0, align 8
  ret i8 0
}
```
```
While deleting: ptr %
Use still stuck around after Def is destroyed:  %0 = load ptr, ptr <badref>, align 8
Uses remain when a value is destroyed!
UNREACHABLE executed at /home/dtcxzyw/WorkSpace/Projects/compilers/llvm-project/llvm/lib/IR/Value.cpp:102!
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: bin/opt -passes=ipsccp --funcspec-min-function-size=1 reduced.ll -S
1.      Running pass "ipsccp" on module "reduced.ll"
 #0 0x000078deeee306f2 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/libLLVMSupport.so.22.0git+0x2306f2)
 #1 0x000078deeee2ccbf llvm::sys::RunSignalHandlers() (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/libLLVMSupport.so.22.0git+0x22ccbf)
 #2 0x000078deeee2ce0c SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
 #3 0x000078deee845330 (/lib/x86_64-linux-gnu/libc.so.6+0x45330)
 #4 0x000078deee89eb2c __pthread_kill_implementation ./nptl/pthread_kill.c:44:76
 #5 0x000078deee89eb2c __pthread_kill_internal ./nptl/pthread_kill.c:78:10
 #6 0x000078deee89eb2c pthread_kill ./nptl/pthread_kill.c:89:10
 #7 0x000078deee84527e raise ./signal/../sysdeps/posix/raise.c:27:6
 #8 0x000078deee8288ff abort ./stdlib/abort.c:81:7
 #9 0x000078deeed2a33e (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/libLLVMSupport.so.22.0git+0x12a33e)
#10 0x000078dee6761699 llvm::Value::~Value() (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/../lib/libLLVMCore.so.22.0git+0x361699)
#11 0x000078dee6761882 llvm::Value::deleteValue() (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/../lib/libLLVMCore.so.22.0git+0x361882)
#12 0x000078dee667ffce llvm::Instruction::eraseFromParent() (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/../lib/libLLVMCore.so.22.0git+0x27ffce)
#13 0x000078dee97c0d45 runIPSCCP(llvm::Module&, llvm::DataLayout const&, llvm::AnalysisManager<llvm::Function>*, std::function<llvm::TargetLibraryInfo const& (llvm::Function&)>, std::function<llvm::TargetTransformInfo& (llvm::Function&)>, std::function<llvm::AssumptionCache& (llvm::Function&)>, std::function<llvm::DominatorTree& (llvm::Function&)>, std::function<llvm::BlockFrequencyInfo& (llvm::Function&)>, bool) SCCP.cpp:0:0
#14 0x000078dee97c122b llvm::IPSCCPPass::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/../lib/libLLVMipo.so.22.0git+0x3c122b)
#15 0x000078dee9aec7f5 llvm::detail::PassModel<llvm::Module, llvm::IPSCCPPass, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/../lib/libLLVMPasses.so.22.0git+0xec7f5)
#16 0x000078dee6724ddd llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/../lib/libLLVMCore.so.22.0git+0x324ddd)
#17 0x000078deef124185 llvm::runPassPipeline(llvm::StringRef, llvm::Module&, llvm::TargetMachine*, llvm::TargetLibraryInfoImpl*, llvm::ToolOutputFile*, llvm::ToolOutputFile*, llvm::ToolOutputFile*, llvm::StringRef, llvm::ArrayRef<llvm::PassPlugin>, llvm::ArrayRef<std::function<void (llvm::PassBuilder&)>>, llvm::opt_tool::OutputKind, llvm::opt_tool::VerifierKind, bool, bool, bool, bool, bool, bool, bool, bool) (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/libLLVMOptDriver.so.22.0git+0x2d185)
#18 0x000078deef12f5ea optMain (/home/dtcxzyw/WorkSpace/Projects/compilers/LLVM/llvm-build/bin/../lib/libLLVMOptDriver.so.22.0git+0x385ea)
#19 0x000078deee82a1ca __libc_start_call_main ./csu/../sysdeps/nptl/libc_start_call_main.h:74:3
#20 0x000078deee82a28b call_init ./csu/../csu/libc-start.c:128:20
#21 0x000078deee82a28b __libc_start_main ./csu/../csu/libc-start.c:347:5
#22 0x0000641d94919095 _start (bin/opt+0x1095)
Aborted (core dumped)
```
llvm version: 3c94613ae98fd9e9846fa77268b59d884b35cf60

Reverting 6bd844812385dd5cb65e08fe9561be9f91ace876 solves the issue. cc @XChy 

</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzkWV9z27gR_zTwC0YaEPwj8sEPtBzNZZrceezcXd80ILCUUEMAC4COlYd-9g5AyhJlJZemmctNm1EsENz9Yf9hFwsx5-RGA1yj_Ablt1es91tjr4Xnz5_2H68aI_bX99BZI3oOFqU1IjUqyPghNUpvcCM1oivTeTzrmHPgUHorO8d5h2ezttfcdcBnO6njg5dGz5z8BCi9TbCFACzmSuHZAyK1Z3YDHgvmmWJ703uM0luMKIXZDqU1zDq6ICitUxr_hMdk-hhGRRb_zOTLIKElSuuElrO2JONIx6niwF5ks4dARulRDm9lp-Agw3NZrIts1utHbT7qmZK6f55tdD-whE9GNus0ySOD1B6sZgpvlGmYwp23WPdKDaQCWqkByxKjjAS7rBOaorB8hdHiBpEatLf7weIYI5pzphSNyGE04cwpoqVMKU4QrSb0VZX8AQs5sFjwkeLIGSRd3E7lPSh1EQvRvFsnefp5JbxpjFG0KAcT8V2HA-qEd4lJJG8sVqwBFUVSwHTfZTQbxDl5TmscorCzINzoqVNyugwTgxx_hNoaOwctsjw9oP5sIjBwcM5Yh2hy0ITEtZRhIng2LBMcfIiA8MyU3GhcHhiSyww0J-fEoyfI0f6nO-5k_PtWKsACFHipN0HmERKR-lcH2HmpFHa-54-YWdNrgVnrweJbaLF0WIDz1uxBBNYvKJUuGyYstCh9M5X1VwcOW9gxqfHHLWjM8BNTPUzBo9F-_fn-Tb38qb559wbDM_Deg8DMY0RXW7MDRFdj0kF09buxjw8d42H2zpp_APcO0RU3u04qCG5YKfW0m3XDu_ExfMkG0dXbe0RXvwU55rzrwiYndBDi7t2b-uENdn2zkx4z3PQbbKEz1mNv8Nb7zoVgpStEVxvpt30z52Z3gj9dVTrXQ5AGMy2w1Fz1ArDfAuaWuS1uGH_0lnGYI1I_eMYfseh33bAfyBzHf3fWbCzbYWY3_Q60DxJ815yajAvd91pLvcEBMKSzAQ9Rio3GOyP6kOkoPbIPeQ0jmhJMngkhZFEKAICUFC3F0SZpjdLa7d0wuLNS-6joBxvdVx6JLPu4Ns5bYDtEixBHUvuYKULW-6YgePfut_cHrzS9VALR1WC5-fwlGpRsAt1D3wU_z52ZUzonG-kRvSHPNOoy5kBE02SqKeW8aS9pet_rB7nRTP3EtBjEKX-8MlHcozL0XBkgHE_EDok7eGGJndxI3Zq1R7QOz09GijisRg43biYS_w8LpJMFyixPUzKaYJB3LJknpTK84EHwIoocWY4SZ1PAChrK8Xrd-a0FJtaPUqm13HUKwk5hIe5xMI7uvEJ0dUo25yits1AeFsUInn8N-KHAfQl2EU8OByMUl2BPeb6IVVanWItzg9IFYMukgwjioicOIeH2TkAXYqczTj4juoqUEZYuwpFmRC2nqLQs2xazJqS9iOPF4K04NUgVTlWLkb2asAvK0hR-bKAnUYYhbMKmneSnYlEkRVWd7NpYC4bhv4bxn7JZX6uzNBbOdUmjtEddknNdypJe1iUWfvgrKlSW9KjQJAsVxaJtOZwo9FY7b_tYw4YJsMzByprdHbMQktNfRzUahT-qNsl_1YITkeXY9vrt3cNyeTcpf-9jgR0r33H6lnn2buh0uNHOvyKoNVN7J917ptkmtGDL47vVWPvjuSxmbefF8Kp9eXVC_yF2Ne9kY5ndv9WteVkTT2R9wQ3CVOOp72ugP1imXWvsLoB_D9jauX7Xhekl41v4HpC3Zic188Z-sPBdAG-U4Y8rC__sQfP912seOqFYXpfLu7PaGmIrO4uthNLmdNvEELtjbjyQ2F5_Tbx9KZxGliBd8UO2nOzMq2QS9T7uuEkNrxjwRZufqCfAM6nGwyhz7r0RoC4pOTHKiS2_wVjh87_igbvYbJw7IVr56INiWqFoJoQ4UTDa_fPK_Z9b-GLFjCY8GnhyCmwTmiXlaZDbXgcb38kOlNTTLuvBW6k399BOTfIZSw1Z-z3j24hTX3p7Ui7e7jr1msoY9Uvvu96vpLoA8l-9_ow6tbVsH2ZPXRttovqN1GOCvUh_KZeHXmeasAPWTXBqaJEOOfsc1XR-7UMSj0-DFn-TWnyJ6jewspVgD3RDEfjW7z-r3_yl87dWPoF9dSASSXmSGcqzwG1zYNh0_j2T-keLmpY5sKOo1VlPxBLO8HodutO188z6NWdKrePVVliEu_513zU2dZeY5tvQQYX-Mx1WpOR8RVo28WJ2LbX054sMw4A8i8ixLRuusel4RKDJJcSJDpfEv4icZqFhzEfgw5G9yBJRZVVSkSrHA2Rw48vt1NCMkWoMgTr0jxC3EjcW4mUXHPLayb1lcCR-AuuGMz9OeZUVScqgKltRQVVmRcsWC1qUTV6JssyaNOftcP1J6nt4Auul3uCiEWWWlQlNy1yInDdFDqRsocqLpIGqrRLGoVwU2Bn1BC7ezMU7uznmHKOM_H253WNE6itxnYoqrdgVXCeLvEhzkqTZ1fY6h0XeClg0KdCCA1kUeVOSsuSQZYwvmit5TQnNSUlLkhKaZPM0LUuWk4RBmxVVW6CMwI5JNQ9Kz43dXEUJrpM8X6TlVbyLdvHnF0plZxCliC4RpfEGcWb07IkpKV6mN6DBsmDkZo_b_tOnkKAoym-v7PW4PzYOZURJ591xTS-9ij_yjJ1Jfov_owviq96q62-_Hx2Vfbqm_w4AAP___9UCMg">