| Issue |
173563
|
| Summary |
mlir-opt crashes in mlir::spirv::FuncOp::verifyBody()
|
| Labels |
mlir:spirv,
crash,
generated by fuzzer
|
| Assignees |
|
| Reporter |
Emilyaxe
|
When running opt on the following IR, mlir-opt crashes.
version 2c02e4c7909a
test.mlir
```
module {
spirv.func @identity_2d_shape_attr_with_bounds(%arg0: !spirv.array<2 x i32>, %arg1: !spirv.array<2 x i32>) -> !spirv.array<2 x i32> "None" {
%0 = builtin.unrealized_conversion_cast %arg1 : !spirv.array<2 x i32> to tensor<2xf32>
%1 = builtin.unrealized_conversion_cast %arg0 : !spirv.array<2 x i32> to tensor<2xf32>
%2 = builtin.unrealized_conversion_cast %1 : tensor<2xf32> to !spirv.array<2 x i32>
spirv.ReturnValue %2 : !spirv.array<2 x i32>
}
}
```
commads:
mlir-opt -remove-dead-values test.mlir
stacktrace
```
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace and instructions to reproduce the bug.
Stack dump:
0. Program arguments: ./build/bin/mlir-opt -remove-dead-values test.mlir
#0 0x0000557aa1d76358 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (./build/bin/mlir-opt+0x1e97358)
#1 0x0000557aa1d73a15 llvm::sys::RunSignalHandlers() (./build/bin/mlir-opt+0x1e94a15)
#2 0x0000557aa1d77396 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
#3 0x00007f60de8e1420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
#4 0x0000557aa6f23ccf mlir::WalkResult llvm::function_ref<mlir::WalkResult (mlir::Operation*)>::callback_fn<mlir::spirv::FuncOp::verifyBody()::$_0>(long, mlir::Operation*) SPIRVOps.cpp:0:0
#5 0x0000557aa1e2cdc7 mlir::WalkResult mlir::detail::walk<mlir::ForwardIterator>(mlir::Operation*, llvm::function_ref<mlir::WalkResult (mlir::Operation*)>, mlir::WalkOrder) (./build/bin/mlir-opt+0x1f4ddc7)
#6 0x0000557aa6f1aa94 mlir::spirv::FuncOp::verifyBody() (./build/bin/mlir-opt+0x703ba94)
#7 0x0000557aa6b51400 llvm::LogicalResult mlir::function_interface_impl::verifyTrait<mlir::spirv::FuncOp>(mlir::spirv::FuncOp) (./build/bin/mlir-opt+0x6c72400)
#8 0x0000557aa6b50b48 mlir::Op<mlir::spirv::FuncOp, mlir::OpTrait::OneRegion, mlir::OpTrait::ZeroResults, mlir::OpTrait::ZeroSuccessors, mlir::OpTrait::ZeroOperands, mlir::OpTrait::OpInvariants, mlir::BytecodeOpInterface::Trait, mlir::OpTrait::AutomaticAllocationScope, mlir::SymbolOpInterface::Trait, mlir::ArgAndResultAttrsOpInterface::Trait, mlir::CallableOpInterface::Trait, mlir::FunctionOpInterface::Trait, mlir::OpTrait::IsIsolatedFromAbove, mlir::detail::Interface<mlir::spirv::QueryMinVersionInterface, mlir::Operation*, mlir::spirv::detail::QueryMinVersionInterfaceTraits, mlir::Op<mlir::spirv::QueryMinVersionInterface>, mlir::OpTrait::TraitBase>::Trait, mlir::detail::Interface<mlir::spirv::QueryMaxVersionInterface, mlir::Operation*, mlir::spirv::detail::QueryMaxVersionInterfaceTraits, mlir::Op<mlir::spirv::QueryMaxVersionInterface>, mlir::OpTrait::TraitBase>::Trait, mlir::detail::Interface<mlir::spirv::QueryExtensionInterface, mlir::Operation*, mlir::spirv::detail::QueryExtensionInterfaceTraits, mlir::Op<mlir::spirv::QueryExtensionInterface>, mlir::OpTrait::TraitBase>::Trait, mlir::detail::Interface<mlir::spirv::QueryCapabilityInterface, mlir::Operation*, mlir::spirv::detail::QueryCapabilityInterfaceTraits, mlir::Op<mlir::spirv::QueryCapabilityInterface>, mlir::OpTrait::TraitBase>::Trait>::verifyInvariants(mlir::Operation*) (./build/bin/mlir-opt+0x6c71b48)
#9 0x0000557aa6b4ce9e mlir::RegisteredOperationName::Model<mlir::spirv::FuncOp>::verifyInvariants(mlir::Operation*) (./build/bin/mlir-opt+0x6c6de9e)
#10 0x0000557aaa73aa7f (anonymous namespace)::OperationVerifier::verifyOpAndDominance(mlir::Operation&) Verifier.cpp:0:0
#11 0x0000557aaa73ac50 (anonymous namespace)::OperationVerifier::verifyOpAndDominance(mlir::Operation&) Verifier.cpp:0:0
#12 0x0000557aaa73a146 mlir::verify(mlir::Operation*, bool) (./build/bin/mlir-opt+0xa85b146)
#13 0x0000557aaa430aa8 mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (./build/bin/mlir-opt+0xa551aa8)
#14 0x0000557aaa431617 mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (./build/bin/mlir-opt+0xa552617)
#15 0x0000557aaa4389ca mlir::PassManager::runPasses(mlir::Operation*, mlir::AnalysisManager) (./build/bin/mlir-opt+0xa5599ca)
#16 0x0000557aaa43801f mlir::PassManager::run(mlir::Operation*) (./build/bin/mlir-opt+0xa55901f)
#17 0x0000557aa1e1a377 performActions(llvm::raw_ostream&, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, mlir::MlirOptMainConfig const&) MlirOptMain.cpp:0:0
#18 0x0000557aa1e195a6 llvm::LogicalResult llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::MemoryBufferRef const&, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&)::$_0>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::MemoryBufferRef const&, llvm::raw_ostream&) MlirOptMain.cpp:0:0
#19 0x0000557aaa74b855 mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::MemoryBufferRef const&, llvm::raw_ostream&)>, llvm::raw_ostream&, llvm::StringRef, llvm::StringRef) (./build/bin/mlir-opt+0xa86c855)
#20 0x0000557aa1e0f166 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&) (./build/bin/mlir-opt+0x1f30166)
#21 0x0000557aa1e0f4a2 mlir::MlirOptMain(int, char**, llvm::StringRef, llvm::StringRef, mlir::DialectRegistry&) (./build/bin/mlir-opt+0x1f304a2)
#22 0x0000557aa1e0f805 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&) (./build/bin/mlir-opt+0x1f30805)
#23 0x0000557aa1d5c9b3 main (./build/bin/mlir-opt+0x1e7d9b3)
#24 0x00007f60ddf1b083 __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:342:3
#25 0x0000557aa1d5c4ee _start (./build/bin/mlir-opt+0x1e7d4ee)
```
![]()
_______________________________________________
llvm-bugs mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs
