LLVM Crash in SelectionDAG

[Keno]

Over in https://github.com/PumasAI/PumasTutorials.jl/pull/56, @chriselrod reports an LLVM crash in SelectionDAG with the following backtrace:

julia> pop = read_nca(data, llq=0concu, timeu=timeu, concu=concu, amtu=amtu)

signal (11): Segmentation fault
in expression starting at REPL[128]:1
isVectorTy at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/include/llvm/IR/Type.h:229 [inlined]
isExtendedVector at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/ValueTypes.cpp:59
isVector at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/include/llvm/CodeGen/ValueTypes.h:151 [inlined]
getScalarType at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/include/llvm/CodeGen/ValueTypes.h:260
getScalarSizeInBits at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/include/llvm/CodeGen/ValueTypes.h:298 [inlined]
SimplifyDemandedBits at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/TargetLowering.cpp:1569
SimplifyDemandedBits at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/TargetLowering.cpp:863
SimplifyDemandedBits at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:1225 [inlined]
SimplifyDemandedBits at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:300 [inlined]
SimplifyDemandedBits at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:293
visitOR at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:5891
combine at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:1801
Run at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:1625 [inlined]
Combine at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/DAGCombiner.cpp:20876
CodeGenAndEmitDAG at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/SelectionDAGISel.cpp:817
SelectAllBasicBlocks at /home/chriselrod/Documents/languages/juliarelease/deps/srccache/llvm-9.0.1/lib/CodeGen/SelectionDAG/SelectionDAGISel.cpp:1588

[Keno]

Automated reduction from the included rr trace:

; ModuleID = 'bugpoint-reduced-simplified.bc'
source_filename = "cleanblq##kw"
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-f80:128-n8:16:32:64-S128-ni:10:11:12:13"
target triple = "x86_64-unknown-linux-gnu"

define void @"julia_cleanblq##kw_5182"() #0 {
pass:                                             ; preds = %top
  %0 = fcmp une double 0.000000e+00, 0x43E0000000000000
  %1 = icmp eq i64 0, 0
  %broadcast.splatinsert3240 = insertelement <8 x i1> undef, i1 %0, i32 0
  %broadcast.splat3241 = shufflevector <8 x i1> %broadcast.splatinsert3240, <8 x i1> undef, <8 x i32> zeroinitializer
  %broadcast.splatinsert3242 = insertelement <8 x i1> undef, i1 %1, i32 0
  %broadcast.splat3243 = shufflevector <8 x i1> %broadcast.splatinsert3242, <8 x i1> undef, <8 x i32> zeroinitializer
  %2 = insertelement <8 x double> undef, double 0.000000e+00, i32 7
  %wide.load3235 = load <8 x double>, <8 x double> addrspace(13)* undef, align 8
  %3 = fcmp ugt <8 x double> %wide.load3235, zeroinitializer
  %4 = fcmp olt <8 x double> %2, zeroinitializer
  %5 = fcmp oeq <8 x double> %2, zeroinitializer
  %6 = and <8 x i1> %5, %broadcast.splat3241
  %7 = and <8 x i1> %6, %broadcast.splat3243
  %8 = xor <8 x i1> %3, <i1 true, i1 true, i1 true, i1 true, i1 true, i1 true, i1 true, i1 true>
  %9 = and <8 x i1> %4, %8
  %predphi3244 = select <8 x i1> %3, <8 x i1> zeroinitializer, <8 x i1> %7
  %predphi3245 = select <8 x i1> %9, <8 x i1> <i1 true, i1 true, i1 true, i1 true, i1 true, i1 true, i1 true, i1 true>, <8 x i1> %predphi3244
  %10 = zext <8 x i1> %predphi3245 to <8 x i8>
  store <8 x i8> %10, <8 x i8> addrspace(13)* undef, align 1
  ret void
}

attributes #0 = { "target-cpu"="skylake-avx512" }

!llvm.module.flags = !{!0}

!0 = !{i32 1, !"Debug Info Version", i32 3}

[Keno]

Proposed upstream fix: https://reviews.llvm.org/D85499

[Keno]

Fixed upstream, but we still need to bump it here.