[Bug tree-optimization/113901] New: [14 regression] ICE when building nodejs-20.11.0 (crash in find_uses_to_rename_use)

[Bug tree-optimization/113901] New: [14 regression] ICE when building nodejs-20.11.0 (crash in find_uses_to_rename_use)

[sjames at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113901

            Bug ID: 113901
           Summary: [14 regression] ICE when building nodejs-20.11.0
                    (crash in find_uses_to_rename_use)
           Product: gcc
           Version: 14.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: tree-optimization
          Assignee: unassigned at gcc dot gnu.org
          Reporter: sjames at gcc dot gnu.org
  Target Milestone: ---

Created attachment 57406
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=57406&action=edit
v8_base_without_compiler.regexp-compiler.ii.xz

```
FAILED: obj/deps/v8/src/regexp/v8_base_without_compiler.regexp-compiler.o
x86_64-pc-linux-gnu-g++ -MMD -MF
obj/deps/v8/src/regexp/v8_base_without_compiler.regexp-compiler.o.d
-D_GLIBCXX_USE_CXX11_ABI=1 -DNODE_OPENSSL_CONF_NAME=nodejs_conf
-DNODE_OPENSSL_CERT_STORE -DICU_NO_USER_DATA_OVERRIDE -DV8_GYP_BUILD
-DV8_TYPED_ARRAY_MAX_SIZE_IN_HEAP=64 -D__STDC_FORMAT_MACROS
-DV8_TARGET_ARCH_X64 -DV8_HAVE_TARGET_OS -DV8_TARGET_OS_LINUX
'-DV8_EMBEDDER_STRING="-node.17"' -DENABLE_DISASSEMBLER
-DV8_PROMISE_INTERNAL_FIELD_COUNT=1
-DV8_ENABLE_PRIVATE_MAPPING_FORK_OPTIMIZATION -DV8_SHORT_BUILTIN_CALLS
-DOBJECT_PRINT -DV8_INTL_SUPPORT -DV8_ATOMIC_OBJECT_FIELD_WRITES
-DV8_ENABLE_LAZY_SOURCE_POSITIONS -DV8_USE_SIPHASH -DV8_SHARED_RO_HEAP
-DV8_WIN64_UNWINDING_INFO -DV8_ENABLE_REGEXP_INTERPRETER_THREADED_DISPATCH
-DV8_USE_ZLIB -DV8_ENABLE_TURBOFAN -DV8_ENABLE_WEBASSEMBLY
-DV8_ENABLE_JAVASCRIPT_PROMISE_HOOKS -DV8_ALLOCATION_FOLDING
-DV8_ALLOCATION_SITE_TRACKING -DV8_ADVANCED_BIGINT_ALGORITHMS
-DICU_UTIL_DATA_IMPL=ICU_UTIL_DATA_STATIC -I../../deps/v8
-I../../deps/v8/include -Igen/inspector-generated-output-root
-I../../deps/v8/third_party/inspector_protocol -Igen
-Igen/generate-bytecode-output-root -I../../deps/v8/third_party/zlib
-I../../deps/v8/third_party/zlib/google -pthread -Wno-unused-parameter
-Wno-return-type -fno-strict-aliasing -m64 -m64 -fno-omit-frame-pointer
-fdata-sections -ffunction-sections -O3 -O3 -pipe -march=native
-fdiagnostics-color=always -fno-rtti -fno-exceptions -std=gnu++17  -c
../../deps/v8/src/regexp/regexp-compiler.cc -o
obj/deps/v8/src/regexp/v8_base_without_compiler.regexp-compiler.o
during GIMPLE pass: vect
../../deps/v8/src/regexp/regexp-compiler.cc: In function ‘int
v8::internal::{anonymous}::GetCaseIndependentLetters(v8::internal::Isolate*,
v8::base::uc16, bool, unibrow::uchar*, int)’:
../../deps/v8/src/regexp/regexp-compiler.cc:753:5: internal compiler error:
Segmentation fault
  753 | int GetCaseIndependentLetters(Isolate* isolate, base::uc16 character,
      |     ^~~~~~~~~~~~~~~~~~~~~~~~~
0x55dd0a0957ec crash_signal
        /usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/toplev.cc:317
0x55dd0ae5bd3f find_uses_to_rename_use
       
/usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/tree-ssa-loop-manip.cc:414
0x55dd0ae5bd3f find_uses_to_rename_bb(basic_block_def*, bitmap_head**,
bitmap_head*, int) [clone .constprop.0]
       
/usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/tree-ssa-loop-manip.cc:489
0x55dd0acbff2d find_uses_to_rename
       
/usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/tree-ssa-loop-manip.cc:521
0x55dd0acbff2d rewrite_into_loop_closed_ssa_1
       
/usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/tree-ssa-loop-manip.cc:588
0x55dd0acbff2d rewrite_into_loop_closed_ssa(bitmap_head*, unsigned int)
       
/usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/tree-ssa-loop-manip.cc:628
0x55dd0b0030e7 execute
       
/usr/src/debug/sys-devel/gcc-14.0.9999/gcc-14.0.9999/gcc/tree-vectorizer.cc:1360
Please submit a full bug report, with preprocessed source (by using
-freport-bug).
Please include the complete backtrace with any bug report.
See <https://bugs.gentoo.org/> for instructions.
```

'g++ -c v8_base_without_compiler.regexp-compiler.ii -march=znver2 -O3' is
enough.

```
$ gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-pc-linux-gnu/14/lto-wrapper
Target: x86_64-pc-linux-gnu
Configured with:
/var/tmp/portage/sys-devel/gcc-14.0.9999/work/gcc-14.0.9999/configure
--host=x86_64-pc-linux-gnu --build=x86_64-pc-linux-gnu --prefix=/usr
--bindir=/usr/x86_64-pc-linux-gnu/gcc-bin/14
--includedir=/usr/lib/gcc/x86_64-pc-linux-gnu/14/include
--datadir=/usr/share/gcc-data/x86_64-pc-linux-gnu/14
--mandir=/usr/share/gcc-data/x86_64-pc-linux-gnu/14/man
--infodir=/usr/share/gcc-data/x86_64-pc-linux-gnu/14/info
--with-gxx-include-dir=/usr/lib/gcc/x86_64-pc-linux-gnu/14/include/g++-v14
--disable-silent-rules --disable-dependency-tracking
--with-python-dir=/share/gcc-data/x86_64-pc-linux-gnu/14/python
--enable-languages=c,c++,fortran --enable-obsolete --enable-secureplt
--disable-werror --with-system-zlib --enable-nls --without-included-gettext
--disable-libunwind-exceptions --enable-checking=yes,extra,rtl,df
--with-bugurl=https://bugs.gentoo.org/ --with-pkgversion='Gentoo 14.0.9999 p,
commit e6628b8411533cc14470a9404cca9047df81cb0f' --with-gcc-major-version-only
--enable-libstdcxx-time --enable-lto --disable-libstdcxx-pch --enable-shared
--enable-threads=posix --enable-__cxa_atexit --enable-clocale=gnu
--enable-multilib --with-multilib-list=m32,m64 --disable-fixed-point
--enable-targets=all --enable-libgomp --disable-libssp --disable-libada
--disable-cet --disable-systemtap --disable-valgrind-annotations
--disable-vtable-verify --disable-libvtv --with-zstd --without-isl
--enable-default-pie --enable-host-pie --disable-host-bind-now
--enable-default-ssp --with-build-config='bootstrap-O3 bootstrap-lto'
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 14.0.1 20240212 (experimental)
f3306a9455f4d2556ba941e5783c94d4bede3b58 (Gentoo 14.0.9999 p, commit
e6628b8411533cc14470a9404cca9047df81cb0f)
```

[Bug tree-optimization/113901] [14 regression] ICE when building nodejs-20.11.0 (crash in find_uses_to_rename_use)

[sjames at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113901

--- Comment #1 from Sam James <sjames at gcc dot gnu.org> ---
```
# g++ -c v8_base_without_compiler.regexp-compiler.ii -march=znver2 -O3 -wrapper
valgrind
==21117== Memcheck, a memory error detector
==21117== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al.
==21117== Using Valgrind-3.22.0 and LibVEX; rerun with -h for copyright info
==21117== Command: /usr/libexec/gcc/x86_64-pc-linux-gnu/14/cc1plus
-fpreprocessed v8_base_without_compiler.regexp-compiler.ii -quiet -dumpbase
v8_base_without_compiler.regexp-compiler.ii -dumpbase-ext .ii -march=znver2 -O3
-o /tmp/ccmEFFzy.s
==21117==
==21117== Conditional jump or move depends on uninitialised value(s)
==21117==    at 0x25A1A67: UnknownInlinedFun (sparseset.h:146)
==21117==    by 0x25A1A67: mark_pseudo_regno_live(int) [clone .lto_priv.0]
(ira-lives.cc:327)
==21117==    by 0x2597D96: UnknownInlinedFun (ira-lives.cc:411)
==21117==    by 0x2597D96: UnknownInlinedFun (ira-lives.cc:425)
==21117==    by 0x2597D96: process_bb_node_lives(ira_loop_tree_node*)
(ira-lives.cc:1518)
==21117==    by 0x2577B6C: ira_traverse_loop_tree(bool, ira_loop_tree_node*,
void (*)(ira_loop_tree_node*), void (*)(ira_loop_tree_node*))
(ira-build.cc:1809)
==21117==    by 0x29487B8: ira_create_allocno_live_ranges() (ira-lives.cc:1818)
==21117==    by 0x257135C: ira_build() (ira-build.cc:3491)
==21117==    by 0x292E234: UnknownInlinedFun (ira.cc:5793)
==21117==    by 0x292E234: (anonymous namespace)::pass_ira::execute(function*)
[clone .lto_priv.0] (ira.cc:6117)
==21117==    by 0x203FD75: execute_one_pass(opt_pass*) (passes.cc:2646)
==21117==    by 0x20F336B: execute_pass_list_1(opt_pass*) (passes.cc:2755)
==21117==    by 0x20F3388: execute_pass_list_1(opt_pass*) (passes.cc:2756)
==21117==    by 0x20F3028: execute_pass_list(function*, opt_pass*)
(passes.cc:2766)
==21117==    by 0x2850A23: cgraph_node::expand() (cgraphunit.cc:1843)
==21117==    by 0x2039673: UnknownInlinedFun (cgraphunit.cc:2026)
==21117==    by 0x2039673: symbol_table::compile() (cgraphunit.cc:2400)
[...]
```

I'll reduce it now.

[Bug tree-optimization/113901] [14 regression] ICE when building nodejs-20.11.0 (crash in find_uses_to_rename_use)

[sjames at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113901

Sam James <sjames at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://gcc.gnu.org/bugzill
                   |                            |a/show_bug.cgi?id=113902
                 CC|                            |rguenth at gcc dot gnu.org

--- Comment #2 from Sam James <sjames at gcc dot gnu.org> ---
PR113902 may be a dupe of this but it has a way smaller testcase.

[Bug tree-optimization/113901] [14 regression] ICE when building nodejs-20.11.0 (crash in find_uses_to_rename_use)

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113901

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jakub at gcc dot gnu.org
           Priority|P3                          |P1
   Target Milestone|---                         |14.0

--- Comment #3 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Confirmed it started with r14-8925-g1e3f78dbb328a2f2db8def241372cb947d9cb7eb
too, so indeed likely dup of PR113902.

[Bug tree-optimization/113901] [14 regression] ICE when building nodejs-20.11.0 (crash in find_uses_to_rename_use)

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113901

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |DUPLICATE
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #4 from Richard Biener <rguenth at gcc dot gnu.org> ---
Duplicate.  The fix for PR113902 works here, too.

*** This bug has been marked as a duplicate of bug 113902 ***