Issue 173565
Summary mlir-opt crashes in mlir/IR/StorageUniquerSupport.h:180
Labels crash, mlir:bufferization, generated by fuzzer
Assignees
Reporter Emilyaxe
    When running opt on the following IR, mlir-opt crashes. 

version 2c02e4c7909a

test.mlir

```
func.func @quantized_read_and_store(%arg0: tensor<8x32x32x2x!quant.uniform<i8:f32, 0.00128>>, %arg1: tensor<i32>) -> () {

  %0 = "test.destination_slice_op"(%arg0, %arg1) : (tensor<8x32x32x2x!quant.uniform<i8:f32, 0.00128>>, tensor<i32>) -> tensor<?x?x?x?x f32>
  "test.destination_slice_op"(%0, %0) : (tensor<?x?x?x?x f32>, tensor<?x?x?x?x f32>) -> ()
 return
}
```


commads:

mlir-opt -sparsification-and-bufferization test.mlir

stacktrace

```
mlir-opt: llvm-project/mlir/include/mlir/IR/StorageUniquerSupport.h:180: static ConcreteT mlir::detail::StorageUserBase<mlir::MemRefType, mlir::BaseMemRefType, mlir::detail::MemRefTypeStorage, mlir::detail::TypeUniquer, mlir::PtrLikeTypeInterface::Trait, mlir::ShapedType::Trait>::get(MLIRContext *, Args &&...) [ConcreteT = mlir::MemRefType, BaseT = mlir::BaseMemRefType, StorageT = mlir::detail::MemRefTypeStorage, UniquerT = mlir::detail::TypeUniquer, Traits = <mlir::PtrLikeTypeInterface::Trait, mlir::ShapedType::Trait>, Args = <llvm::ArrayRef<long> &, mlir::Type &, mlir::MemRefLayoutAttrInterface &, mlir::Attribute &>]: Assertion `succeeded( ConcreteT::verifyInvariants(getDefaultDiagnosticEmitFn(ctx), args...))' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace and instructions to reproduce the bug.
Stack dump:
0.      Program arguments: ./build/bin/mlir-opt -sparsification-and-bufferization test.mlir
 #0 0x00005636ee258358 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (./build/bin/mlir-opt+0x1e97358)
 #1 0x00005636ee255a15 llvm::sys::RunSignalHandlers() (./build/bin/mlir-opt+0x1e94a15)
 #2 0x00005636ee259396 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
 #3 0x00007ff385f39420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
 #4 0x00007ff38559200b raise /build/glibc-B3wQXB/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
 #5 0x00007ff385571859 abort /build/glibc-B3wQXB/glibc-2.31/stdlib/abort.c:81:7
 #6 0x00007ff385571729 get_sysdep_segment_value /build/glibc-B3wQXB/glibc-2.31/intl/loadmsgcat.c:509:8
 #7 0x00007ff385571729 _nl_load_domain /build/glibc-B3wQXB/glibc-2.31/intl/loadmsgcat.c:970:34
 #8 0x00007ff385582fd6 (/lib/x86_64-linux-gnu/libc.so.6+0x33fd6)
 #9 0x00005636f6b80067 (./build/bin/mlir-opt+0xa7bf067)
#10 0x00005636f6b7ff6e mlir::MemRefType::get(llvm::ArrayRef<long>, mlir::Type, mlir::MemRefLayoutAttrInterface, mlir::Attribute) (./build/bin/mlir-opt+0xa7bef6e)
#11 0x00005636f542e1ea mlir::bufferization::getMemRefTypeWithStaticIdentityLayout(mlir::TensorType, mlir::Attribute) (./build/bin/mlir-opt+0x906d1ea)
#12 0x00005636f542fef2 std::_Function_handler<mlir::bufferization::BufferLikeType (mlir::bufferization::TensorLikeType, mlir::Attribute, mlir::func::FuncOp, mlir::bufferization::BufferizationOptions const&), mlir::bufferization::BufferizationOptions::setFunctionBoundaryTypeConversion(mlir::bufferization::LayoutMapOption)::$_0>::_M_invoke(std::_Any_data const&, mlir::bufferization::TensorLikeType&&, mlir::Attribute&&, mlir::func::FuncOp&&, mlir::bufferization::BufferizationOptions const&) BufferizableOpInterface.cpp:0:0
#13 0x00005636f5404af3 mlir::bufferization::func_ext::getBufferizedFunctionArgType(mlir::func::FuncOp, long, mlir::bufferization::BufferizationOptions const&) FuncBufferizableOpInterfaceImpl.cpp:0:0
#14 0x00005636f54040b0 mlir::bufferization::func_ext::FuncOpInterface::bufferize(mlir::Operation*, mlir::RewriterBase&, mlir::bufferization::BufferizationOptions const&, mlir::bufferization::BufferizationState&) const (./build/bin/mlir-opt+0x90430b0)
#15 0x00005636f53e564f mlir::bufferization::bufferizeOp(mlir::Operation*, mlir::bufferization::BufferizationOptions const&, mlir::bufferization::BufferizationState&, mlir::bufferization::BufferizationStatistics*) (./build/bin/mlir-opt+0x902464f)
#16 0x00005636f541ba14 mlir::bufferization::bufferizeModuleOp(mlir::Operation*, mlir::bufferization::OneShotBufferizationOptions const&, mlir::bufferization::BufferizationState&, mlir::bufferization::BufferizationStatistics*) (./build/bin/mlir-opt+0x905aa14)
#17 0x00005636eed5c4af mlir::sparse_tensor::SparsificationAndBufferizationPass::runDenseBufferization() (./build/bin/mlir-opt+0x299b4af)
#18 0x00005636eed5b40f mlir::sparse_tensor::SparsificationAndBufferizationPass::runOnOperation() (./build/bin/mlir-opt+0x299a40f)
#19 0x00005636f69127be mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (./build/bin/mlir-opt+0xa5517be)
#20 0x00005636f6913617 mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (./build/bin/mlir-opt+0xa552617)
#21 0x00005636f691a9ca mlir::PassManager::runPasses(mlir::Operation*, mlir::AnalysisManager) (./build/bin/mlir-opt+0xa5599ca)
#22 0x00005636f691a01f mlir::PassManager::run(mlir::Operation*) (./build/bin/mlir-opt+0xa55901f)
#23 0x00005636ee2fc377 performActions(llvm::raw_ostream&, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, mlir::MlirOptMainConfig const&) MlirOptMain.cpp:0:0
#24 0x00005636ee2fb5a6 llvm::LogicalResult llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::MemoryBufferRef const&, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&)::$_0>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::MemoryBufferRef const&, llvm::raw_ostream&) MlirOptMain.cpp:0:0
#25 0x00005636f6c2d855 mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::MemoryBufferRef const&, llvm::raw_ostream&)>, llvm::raw_ostream&, llvm::StringRef, llvm::StringRef) (./build/bin/mlir-opt+0xa86c855)
#26 0x00005636ee2f1166 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&) (./build/bin/mlir-opt+0x1f30166)
#27 0x00005636ee2f14a2 mlir::MlirOptMain(int, char**, llvm::StringRef, llvm::StringRef, mlir::DialectRegistry&) (./build/bin/mlir-opt+0x1f304a2)
#28 0x00005636ee2f1805 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&) (./build/bin/mlir-opt+0x1f30805)
#29 0x00005636ee23e9b3 main (./build/bin/mlir-opt+0x1e7d9b3)
#30 0x00007ff385573083 __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:342:3
#31 0x00005636ee23e4ee _start (./build/bin/mlir-opt+0x1e7d4ee)
```

_______________________________________________
llvm-bugs mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs

Reply via email to