[Bug tree-optimization/107766] New: [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[Bug tree-optimization/107766] New: [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

            Bug ID: 107766
           Summary: [13 Regression] ICE Segmentation fault since
                    r13-4137-gc5df8392c5848c04
           Product: gcc
           Version: 13.0
            Status: UNCONFIRMED
          Keywords: ice-on-valid-code
          Severity: normal
          Priority: P3
         Component: tree-optimization
          Assignee: unassigned at gcc dot gnu.org
          Reporter: marxin at gcc dot gnu.org
                CC: rguenth at gcc dot gnu.org
  Target Milestone: ---
              Host: x86_64-linux-gnu

The following is reduced from blender package:

$ cat bt.ii
typedef double btScalar;
struct btVector3 {
  operator btScalar *() const;
};
double m_vec[2];
struct btShapeMatrix {
  double &operator[](int i) { return m_vec[i]; }
};
btScalar shape_function___1pxt1pz, shape_function__fac;
struct btMiniSDF {
  void shape_function_(btVector3 const &) const;
};
void btMiniSDF::shape_function_(btVector3 const &xi) const {
  btShapeMatrix res;
  btScalar _1m3y = 1.0 - 3.0 * xi[1], _1p3y = 1.0 + 3.0 * xi[1],
           fact1m3y = shape_function__fac * _1m3y,
           fact1p3y = shape_function__fac * _1p3y;
  res[22] = fact1m3y * shape_function___1pxt1pz;
  res[23] = fact1p3y * shape_function___1pxt1pz;
}

$ g++ bt.ii -c -O2 -ffp-contract=off
during GIMPLE pass: slp
bt.ii: In member function ‘void btMiniSDF::shape_function_(const btVector3&)
const’:
bt.ii:13:6: internal compiler error: Segmentation fault
   13 | void btMiniSDF::shape_function_(btVector3 const &xi) const {
      |      ^~~~~~~~~
0x11d53ef crash_signal
        /home/marxin/Programming/gcc/gcc/toplev.cc:314
0x1493370 complex_mul_pattern::matches(_complex_operation, hash_map<_slp_tree*,
_complex_perm_kinds, simple_hashmap_traits<default_hash_traits<_slp_tree*>,
_complex_perm_kinds> >*, hash_map<pair_hash<nofree_ptr_hash<_slp_tree>,
nofree_ptr_hash<_slp_tree> >, bool,
simple_hashmap_traits<default_hash_traits<pair_hash<nofree_ptr_hash<_slp_tree>,
nofree_ptr_hash<_slp_tree> > >, bool> >*, _slp_tree**, vec<_slp_tree*, va_heap,
vl_ptr>*)
        /home/marxin/Programming/gcc/gcc/tree-vect-slp-patterns.cc:1042
0x1494443 complex_mul_pattern::matches(_complex_operation, hash_map<_slp_tree*,
_complex_perm_kinds, simple_hashmap_traits<default_hash_traits<_slp_tree*>,
_complex_perm_kinds> >*, hash_map<pair_hash<nofree_ptr_hash<_slp_tree>,
nofree_ptr_hash<_slp_tree> >, bool,
simple_hashmap_traits<default_hash_traits<pair_hash<nofree_ptr_hash<_slp_tree>,
nofree_ptr_hash<_slp_tree> > >, bool> >*, _slp_tree**, vec<_slp_tree*, va_heap,
vl_ptr>*)
        /home/marxin/Programming/gcc/gcc/tree-vect-slp-patterns.cc:1023
0x1494443 complex_operations_pattern::recognize(hash_map<_slp_tree*,
_complex_perm_kinds, simple_hashmap_traits<default_hash_traits<_slp_tree*>,
_complex_perm_kinds> >*, hash_map<pair_hash<nofree_ptr_hash<_slp_tree>,
nofree_ptr_hash<_slp_tree> >, bool,
simple_hashmap_traits<default_hash_traits<pair_hash<nofree_ptr_hash<_slp_tree>,
nofree_ptr_hash<_slp_tree> > >, bool> >*, _slp_tree**)
        /home/marxin/Programming/gcc/gcc/tree-vect-slp-patterns.cc:1424
0x147ee67 vect_match_slp_patterns_2
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:3010
0x147eebe vect_match_slp_patterns_2
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:3003
0x147eebe vect_match_slp_patterns_2
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:3003
0x147eebe vect_match_slp_patterns_2
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:3003
0x14801d3 vect_match_slp_patterns
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:3042
0x14801d3 vect_analyze_slp(vec_info*, unsigned int)
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:3533
0x148a6c3 vect_slp_analyze_bb_1
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:7317
0x148a6c3 vect_slp_region
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:7419
0x148c39c vect_slp_bbs
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:7610
0x148c623 vect_slp_function(function*)
        /home/marxin/Programming/gcc/gcc/tree-vect-slp.cc:7698
0x1495371 execute
        /home/marxin/Programming/gcc/gcc/tree-vectorizer.cc:1532
Please submit a full bug report, with preprocessed source (by using
-freport-bug).
Please include the complete backtrace with any bug report.
See <https://gcc.gnu.org/bugs/> for instructions.

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

Martin Liška <marxin at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Last reconfirmed|                            |2022-11-20
             Status|UNCONFIRMED                 |NEW
      Known to fail|                            |13.0
   Target Milestone|---                         |13.0
     Ever confirmed|0                           |1

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|unassigned at gcc dot gnu.org      |rguenth at gcc dot gnu.org
             Status|NEW                         |ASSIGNED

--- Comment #1 from Richard Biener <rguenth at gcc dot gnu.org> ---
Testing a patch.

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[slyfox at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

Sergei Trofimovich <slyfox at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |slyfox at gcc dot gnu.org

--- Comment #2 from Sergei Trofimovich <slyfox at gcc dot gnu.org> ---
*** Bug 107789 has been marked as a duplicate of this bug. ***

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[slyfox at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

--- Comment #3 from Sergei Trofimovich <slyfox at gcc dot gnu.org> ---
Posting example from PR107789 here in unlikely case it's a slightly different
problem:

$ cat a.c.c
long ga, gb, gc, gd;
unsigned long ge, gf;
int gh;
int bug(void) {
  gf = gb ? ga : 0;
  gf -= gh * ge;
  gc += gd * ge;
  if (gf)
    gc += gf;
  return 0;
}

Crashes as:

$ gcc -std=c99 -O2 -c a.c.c -o a.o -O2

during GIMPLE pass: slp
a.c.c: In function 'bug':
a.c.c:4:5: internal compiler error: Segmentation fault
    4 | int bug(void) {
      |     ^~~
0x1ae8c54 diagnostic_impl(rich_location*, diagnostic_metadata const*, int, char
const*, __va_list_tag (*) [1], diagnostic_t)
        ???:0
0x1ae98a6 internal_error(char const*, ...)
        ???:0
0xcb2b3f crash_signal(int)
        ???:0
0xf194b7 complex_mul_pattern::matches(...

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[cvs-commit at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

--- Comment #4 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by Richard Biener <rguenth@gcc.gnu.org>:

https://gcc.gnu.org/g:1a06ae6f2f4f292fd05a900bcf433cb4282da1e3

commit r13-4226-g1a06ae6f2f4f292fd05a900bcf433cb4282da1e3
Author: Richard Biener <rguenther@suse.de>
Date:   Mon Nov 21 07:56:06 2022 +0100

    tree-optimization/107766 - ICE with recent -ffp-contract=off fix

    The following uses *node to check for FP types rather than the
    child nodes which could be constant leafs and thus without a
    vector type.

            PR tree-optimization/107766
            * tree-vect-slp-patterns.cc (complex_mul_pattern::matches):
            Use *node to check for FP vector types.

            * g++.dg/vect/pr107766.cc: New testcase.

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|ASSIGNED                    |RESOLVED

--- Comment #5 from Richard Biener <rguenth at gcc dot gnu.org> ---
Fixed.

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |zsojka at seznam dot cz

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
*** Bug 107776 has been marked as a duplicate of this bug. ***

[Bug tree-optimization/107766] [13 Regression] ICE Segmentation fault since r13-4137-gc5df8392c5848c04

[cvs-commit at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107766

--- Comment #7 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The releases/gcc-12 branch has been updated by Richard Biener
<rguenth@gcc.gnu.org>:

https://gcc.gnu.org/g:9e242f8a2d5987ddaa74696e5ad809303ddc8dd0

commit r12-8975-g9e242f8a2d5987ddaa74696e5ad809303ddc8dd0
Author: Richard Biener <rguenther@suse.de>
Date:   Mon Nov 21 07:56:06 2022 +0100

    tree-optimization/107766 - ICE with recent -ffp-contract=off fix

    The following uses *node to check for FP types rather than the
    child nodes which could be constant leafs and thus without a
    vector type.

            PR tree-optimization/107766
            * tree-vect-slp-patterns.cc (complex_mul_pattern::matches):
            Use *node to check for FP vector types.

            * g++.dg/vect/pr107766.cc: New testcase.

    (cherry picked from commit 1a06ae6f2f4f292fd05a900bcf433cb4282da1e3)