[llvm] [RISCV] Fix assertion in combineBinOpOfExtractToReduceTree on type mismatch (PR #202201)

Sun Aug 2 17:38:18 PDT 2026

llvm-ci wrote:

LLVM Buildbot has detected a new failure on builder `clang-s390x-linux` running on `systemz-1` while building `llvm` at step 5 "ninja check 1".

Full details are available at: https://lab.llvm.org/buildbot/#/builders/42/builds/9735

<details>
<summary>Here is the relevant piece of the build log for the reference</summary>

```
Step 5 (ninja check 1) failure: stage 1 checked (failure)
******************** TEST 'libFuzzer-s390x-default-Linux :: fuzzer-timeout.test' FAILED ********************
Exit Code: 1

Command Output (stdout):
--
# RUN: at line 1
/home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/./bin/clang    -Wthread-safety -Wthread-safety-reference -Wthread-safety-beta   --driver-mode=g++ -O2 -gline-tables-only -fsanitize=address,fuzzer -I/home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/lib/fuzzer  /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/TimeoutTest.cpp -o /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest
# executed command: /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/./bin/clang -Wthread-safety -Wthread-safety-reference -Wthread-safety-beta --driver-mode=g++ -O2 -gline-tables-only -fsanitize=address,fuzzer -I/home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/lib/fuzzer /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/TimeoutTest.cpp -o /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest
# RUN: at line 2
/home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/./bin/clang    -Wthread-safety -Wthread-safety-reference -Wthread-safety-beta   --driver-mode=g++ -O2 -gline-tables-only -fsanitize=address,fuzzer -I/home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/lib/fuzzer  /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/TimeoutEmptyTest.cpp -o /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutEmptyTest
# executed command: /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/./bin/clang -Wthread-safety -Wthread-safety-reference -Wthread-safety-beta --driver-mode=g++ -O2 -gline-tables-only -fsanitize=address,fuzzer -I/home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/lib/fuzzer /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/TimeoutEmptyTest.cpp -o /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutEmptyTest
# RUN: at line 3
not  /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest -timeout=1 2>&1 | FileCheck /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/fuzzer-timeout.test --check-prefix=TimeoutTest
# executed command: not /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest -timeout=1
# executed command: FileCheck /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/fuzzer-timeout.test --check-prefix=TimeoutTest
# RUN: at line 12
not  /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest -timeout=1 /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/hi.txt 2>&1 | FileCheck /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/fuzzer-timeout.test --check-prefix=SingleInputTimeoutTest
# executed command: not /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest -timeout=1 /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/hi.txt
# executed command: FileCheck /home/buildbot/sandbox/buildbot/clang-s390x-linux/llvm/compiler-rt/test/fuzzer/fuzzer-timeout.test --check-prefix=SingleInputTimeoutTest
# RUN: at line 16
/home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest -timeout=1 -timeout_exitcode=0
# executed command: /home/buildbot/sandbox/buildbot/clang-s390x-linux/stage1/runtimes/runtimes-bins/compiler-rt/test/fuzzer/S390XDefaultLinuxConfig/Output/fuzzer-timeout.test.tmp-TimeoutTest -timeout=1 -timeout_exitcode=0
# .---command stderr------------
# | INFO: Running with entropic power schedule (0xFF, 100).
# | INFO: Seed: 1443100396
# | INFO: Loaded 1 modules   (12 inline 8-bit counters): 12 [0x2aa24bcbe88, 0x2aa24bcbe94), 
# | INFO: Loaded 1 PC tables (12 PCs): 12 [0x2aa24bcbe98,0x2aa24bcbf58), 
# | INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 4096 bytes
# | INFO: A corpus is not provided, starting from an empty corpus
# | #2	INITED cov: 2 ft: 2 corp: 1/1b exec/s: 0 rss: 124Mb
# | #1574	NEW    cov: 3 ft: 3 corp: 2/7b lim: 17 exec/s: 0 rss: 124Mb L: 6/6 MS: 2 InsertByte-InsertRepeatedBytes-
# | #1595	REDUCE cov: 3 ft: 3 corp: 2/6b lim: 17 exec/s: 0 rss: 124Mb L: 5/5 MS: 1 EraseBytes-
# | #1694	REDUCE cov: 4 ft: 4 corp: 3/7b lim: 17 exec/s: 0 rss: 124Mb L: 1/5 MS: 4 ShuffleBytes-ChangeBit-ShuffleBytes-CrossOver-
# | #1875	REDUCE cov: 4 ft: 4 corp: 3/6b lim: 17 exec/s: 0 rss: 124Mb L: 4/4 MS: 1 EraseBytes-
# | #1902	REDUCE cov: 4 ft: 4 corp: 3/5b lim: 17 exec/s: 0 rss: 124Mb L: 3/3 MS: 2 InsertByte-EraseBytes-
# | #1984	REDUCE cov: 4 ft: 4 corp: 3/4b lim: 17 exec/s: 0 rss: 124Mb L: 2/2 MS: 2 ShuffleBytes-EraseBytes-
# | #6695	NEW    cov: 5 ft: 5 corp: 4/53b lim: 63 exec/s: 0 rss: 124Mb L: 49/49 MS: 1 InsertRepeatedBytes-
# | #6774	REDUCE cov: 5 ft: 5 corp: 4/48b lim: 63 exec/s: 0 rss: 124Mb L: 44/44 MS: 4 ChangeBinInt-CrossOver-CrossOver-EraseBytes-
# | #6791	REDUCE cov: 5 ft: 5 corp: 4/42b lim: 63 exec/s: 0 rss: 124Mb L: 38/38 MS: 2 CrossOver-EraseBytes-
# | #6813	REDUCE cov: 5 ft: 5 corp: 4/34b lim: 63 exec/s: 0 rss: 124Mb L: 30/30 MS: 2 ShuffleBytes-EraseBytes-
# | #6834	REDUCE cov: 5 ft: 5 corp: 4/24b lim: 63 exec/s: 0 rss: 124Mb L: 20/20 MS: 1 EraseBytes-
# | #6836	REDUCE cov: 5 ft: 5 corp: 4/14b lim: 63 exec/s: 0 rss: 124Mb L: 10/10 MS: 2 ChangeBinInt-EraseBytes-
# | #6847	REDUCE cov: 5 ft: 5 corp: 4/11b lim: 63 exec/s: 0 rss: 124Mb L: 7/7 MS: 1 EraseBytes-
# | #7158	REDUCE cov: 5 ft: 5 corp: 4/9b lim: 63 exec/s: 0 rss: 124Mb L: 5/5 MS: 1 EraseBytes-
# | #7215	REDUCE cov: 5 ft: 5 corp: 4/8b lim: 63 exec/s: 0 rss: 124Mb L: 4/4 MS: 2 CopyPart-EraseBytes-
# | #7286	REDUCE cov: 6 ft: 6 corp: 5/10b lim: 63 exec/s: 0 rss: 124Mb L: 2/4 MS: 1 EraseBytes-
# | #7429	REDUCE cov: 6 ft: 6 corp: 5/9b lim: 63 exec/s: 0 rss: 124Mb L: 3/3 MS: 3 CopyPart-CrossOver-EraseBytes-
# | ALARM: working on the last Unit for 1 seconds
# |        and the timeout value is 1 (use -timeout=N to change)
# | MS: 2 InsertByte-ChangeByte-; base unit: 94dd9e08c129c785f7f256e82fbe0a30e6d1ae40
...

```

</details>

https://github.com/llvm/llvm-project/pull/202201