[MIGraphX EP] Segfaults when reading some SSD MobileNet v1 models

[sdroege]

Describe the issue

Loading a specific SSD MobileNet v1 model results in a segfault. Model is available from https://gitlab.collabora.com/gstreamer/onnx-models/-/blob/a8de628ad5a745d3af6ba8c0ee84321605de07e9/models/ssd_mobilenet_v1_coco.onnx

yolov8s.onnx next to it loads fine. SSD MobileNet v1 works fine with the CPU provider too.

To reproduce

• Compile simple testcase: migraphx_sample.cc.txt
• ./migraphx_sample cpu models/ssd_mobilenet_v1_coco.onnx works
• ./migraphx_sample migraphx models/ssd_mobilenet_v1_coco.onnx segfaults

Using host libthread_db library "/lib64/libthread_db.so.1".
2026-08-03 17:29:10.678919639 [I:onnxruntime:sample, device_discovery_common.cc:34 operator()] Discovered OrtHardwareDevice {vendor_id:0x1002, device_id:0x164e, vendor:, type:1, metadata: [card_idx=2, pci_bus_id=0000:16:00.0, ]}
2026-08-03 17:29:10.678947302 [I:onnxruntime:sample, device_discovery_common.cc:34 operator()] Discovered OrtHardwareDevice {vendor_id:0x1002, device_id:0x7551, vendor:, type:1, metadata: [card_idx=1, pci_bus_id=0000:03:00.0, ]}
2026-08-03 17:29:10.678950628 [I:onnxruntime:sample, device_discovery_common.cc:34 operator()] Discovered OrtHardwareDevice {vendor_id:0x1022, device_id:0x0, vendor:AMD, type:0, metadata: []}
[New Thread 0x7fffe03ff680 (LWP 1571402)]
[New Thread 0x7fffdfbfe680 (LWP 1571403)]
[New Thread 0x7fffdf0ff680 (LWP 1571404)]
[Thread 0x7fffdf0ff680 (LWP 1571404) exited]
Loading: models/ssd_mobilenet_v1_coco.onnx (provider: migraphx, device: 0)
2026-08-03 17:29:11.941203690 [I:onnxruntime:, inference_session.cc:754 TraceSessionOptions] Session Options {  execution_mode:0 execution_order:DEFAULT enable_profiling:0 optimized_model_filepath:"" enable_mem_pattern:1 enable_mem_reuse:1 enable_cpu_mem_arena:1 profile_file_prefix:onnxruntime_profile_ session_logid: session_log_severity_level:-1 session_log_verbosity_level:0 max_num_graph_transformation_steps:10 graph_optimization_level:2 intra_op_param:OrtThreadPoolParams { thread_pool_size: 0 auto_set_affinity: 0 allow_spinning: 1 spin_duration_us: -1 spin_backoff_max: 1 dynamic_block_base_: 0 stack_size: 0 affinity_str:  set_denormal_as_zero: 0 } inter_op_param:OrtThreadPoolParams { thread_pool_size: 0 auto_set_affinity: 0 allow_spinning: 1 spin_duration_us: -1 spin_backoff_max: 1 dynamic_block_base_: 0 stack_size: 0 affinity_str:  set_denormal_as_zero: 0 } use_per_session_threads:1 thread_pool_allow_spinning:1 use_deterministic_compute:0 ep_selection_policy:0 config_options: {  } }
2026-08-03 17:29:11.941219469 [I:onnxruntime:, inference_session.cc:521 operator()] Flush-to-zero and denormal-as-zero are off
2026-08-03 17:29:11.941223417 [I:onnxruntime:, inference_session.cc:529 ConstructorCommon] Creating and using per session threadpools since use_per_session_threads_ is true
2026-08-03 17:29:11.941227725 [I:onnxruntime:, inference_session.cc:574 ConstructorCommon] Dynamic block base set to 0
[New Thread 0x7fffde8fe680 (LWP 1571406)]
[New Thread 0x7fffde0fd680 (LWP 1571407)]
[New Thread 0x7fffdd8fc680 (LWP 1571408)]
[New Thread 0x7fffdd0fb680 (LWP 1571409)]
[New Thread 0x7fffdc8fa680 (LWP 1571410)]
[New Thread 0x7ffd8fbff680 (LWP 1571411)]
[New Thread 0x7ffd8f3fe680 (LWP 1571412)]
[New Thread 0x7ffd8ebfd680 (LWP 1571413)]
[New Thread 0x7ffd8e3fc680 (LWP 1571414)]
[New Thread 0x7ffd8dbfb680 (LWP 1571415)]
[New Thread 0x7ffd8d3fa680 (LWP 1571416)]
[New Thread 0x7ffd8cbf9680 (LWP 1571417)]
[New Thread 0x7ffd67fff680 (LWP 1571418)]
[New Thread 0x7ffd677fe680 (LWP 1571419)]
[New Thread 0x7ffd66ffd680 (LWP 1571420)]
[New Thread 0x7ffd667fc680 (LWP 1571421)]
[New Thread 0x7ffd65ffb680 (LWP 1571422)]
[New Thread 0x7ffd657fa680 (LWP 1571423)]
[New Thread 0x7ffd64ff9680 (LWP 1571424)]
[New Thread 0x7ffd43fff680 (LWP 1571425)]
[New Thread 0x7ffd437fe680 (LWP 1571426)]
[New Thread 0x7ffd42ffd680 (LWP 1571427)]
[New Thread 0x7ffd427fc680 (LWP 1571428)]
[New Thread 0x7ffd41ffb680 (LWP 1571429)]
[New Thread 0x7ffd417fa680 (LWP 1571430)]
[New Thread 0x7ffd40ff9680 (LWP 1571431)]
[New Thread 0x7ffd2bfff680 (LWP 1571432)]
[New Thread 0x7ffd2b7fe680 (LWP 1571433)]
[New Thread 0x7ffd2affd680 (LWP 1571434)]
[New Thread 0x7ffd2a7fc680 (LWP 1571435)]
[New Thread 0x7ffd29ffb680 (LWP 1571436)]
2026-08-03 17:29:13.079847922 [W:onnxruntime:sample, migraphx_execution_provider.cc:167 MIGraphXExecutionProvider] [MIGraphX EP] MIGraphX ENV Override Variables Set:
2026-08-03 17:29:13.079872048 [I:onnxruntime:sample, migraphx_execution_provider.cc:179 MIGraphXExecutionProvider] 
 ORT_MIGRAPHX_MODEL_CACHE_PATH: cache
2026-08-03 17:29:13.079891615 [I:onnxruntime:, inference_session.cc:2347 Initialize] Initializing session.
2026-08-03 17:29:13.079896324 [I:onnxruntime:, inference_session.cc:2385 Initialize] Adding default CPU execution provider.
2026-08-03 17:29:13.079912975 [I:onnxruntime:sample, bfc_arena.cc:27 BFCArena] Creating BFCArena for Cuda with following configs: initial_chunk_size_bytes: 1048576 max_dead_bytes_per_chunk: 134217728 initial_growth_chunk_size_bytes: 2097152 max_power_of_two_extend_bytes: 1073741824 memory limit: 18446744073709551615 arena_extend_strategy: 0
2026-08-03 17:29:13.079917323 [I:onnxruntime:sample, bfc_arena.cc:27 BFCArena] Creating BFCArena for CudaPinned with following configs: initial_chunk_size_bytes: 1048576 max_dead_bytes_per_chunk: 134217728 initial_growth_chunk_size_bytes: 2097152 max_power_of_two_extend_bytes: 1073741824 memory limit: 18446744073709551615 arena_extend_strategy: 0
2026-08-03 17:29:13.079920910 [I:onnxruntime:sample, bfc_arena.cc:27 BFCArena] Creating BFCArena for Cpu with following configs: initial_chunk_size_bytes: 1048576 max_dead_bytes_per_chunk: 134217728 initial_growth_chunk_size_bytes: 2097152 max_power_of_two_extend_bytes: 1073741824 memory limit: 18446744073709551615 arena_extend_strategy: 0
2026-08-03 17:29:13.081056380 [I:onnxruntime:, graph_partitioner.cc:1483 InlineFunctionsAOT] This model does not have any local functions defined. AOT Inlining is not performed
2026-08-03 17:29:13.090696027 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer EnsureUniqueDQForNodeUnit modified: 0 with status: OK
2026-08-03 17:29:13.093684314 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer Level1_RuleBasedTransformer modified: 1 with status: OK
2026-08-03 17:29:13.111991840 [I:onnxruntime:, graph.cc:5569 CleanUnusedInitializersAndNodeArgs] Removing initializer 'const_fold_opt__7682'. It is no longer used by any node.
2026-08-03 17:29:13.112402076 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer DoubleQDQPairsRemover modified: 0 with status: OK
2026-08-03 17:29:13.112558052 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ConstantSharing modified: 0 with status: OK
2026-08-03 17:29:13.115792274 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer CommonSubexpressionElimination modified: 1 with status: OK
2026-08-03 17:29:13.132081900 [I:onnxruntime:, graph.cc:6392 InlineIfSubgraph] Constant folded (inlined) else_branch for If node: Postprocessor/BatchMultiClassNonMaxSuppression/map/while/PadOrClipBoxList/cond_1/cond_If__92
2026-08-03 17:29:13.132111927 [I:onnxruntime:, graph.cc:6392 InlineIfSubgraph] Constant folded (inlined) else_branch for If node: Postprocessor/BatchMultiClassNonMaxSuppression/map/while/PadOrClipBoxList/cond_3/cond_If__76
2026-08-03 17:29:13.132134309 [I:onnxruntime:, graph.cc:6392 InlineIfSubgraph] Constant folded (inlined) then_branch for If node: Postprocessor/BatchMultiClassNonMaxSuppression/map/while/PadOrClipBoxList/cond/cond_If__108
2026-08-03 17:29:13.132151983 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ConstantFolding modified: 1 with status: OK
2026-08-03 17:29:13.146096479 [I:onnxruntime:, graph.cc:5569 CleanUnusedInitializersAndNodeArgs] Removing initializer 'Postprocessor/BatchMultiClassNonMaxSuppression/map/while/PadOrClipBoxList/cond/cond/pred_id:0'. It is no longer used by any node.
2026-08-03 17:29:13.146105927 [I:onnxruntime:, graph.cc:5569 CleanUnusedInitializersAndNodeArgs] Removing initializer 'Postprocessor/BatchMultiClassNonMaxSuppression/map/while/PadOrClipBoxList/cond_1/cond/pred_id:0'. It is no longer used by any node.
2026-08-03 17:29:13.146108642 [I:onnxruntime:, graph.cc:5569 CleanUnusedInitializersAndNodeArgs] Removing initializer 'Reshape__8213:0'. It is no longer used by any node.
2026-08-03 17:29:13.146113421 [I:onnxruntime:, graph.cc:5569 CleanUnusedInitializersAndNodeArgs] Removing initializer 'Preprocessor/map/while/ResizeImage/stack:0'. It is no longer used by any node.
2026-08-03 17:29:13.146120074 [I:onnxruntime:, graph.cc:5569 CleanUnusedInitializersAndNodeArgs] Removing initializer 'new_shape__8233'. It is no longer used by any node.
2026-08-03 17:29:13.147769897 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer MatMulAddFusion modified: 0 with status: OK
2026-08-03 17:29:13.148639012 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ReshapeFusion modified: 1 with status: OK
2026-08-03 17:29:13.163532445 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer FreeDimensionOverrideTransformer modified: 0 with status: OK
2026-08-03 17:29:13.164414385 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer SliceConcatToSpaceToDepthFusion modified: 0 with status: OK
2026-08-03 17:29:13.164418803 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer GeluFusionL1 modified: 0 with status: OK
2026-08-03 17:29:13.164421087 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer LayerNormFusionL1 modified: 0 with status: OK
2026-08-03 17:29:13.165356588 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer QDQPropagationTransformer modified: 0 with status: OK
2026-08-03 17:29:13.166180809 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer WeightBiasQuantization modified: 0 with status: OK
2026-08-03 17:29:13.167040135 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer EnsureUniqueDQForNodeUnit modified: 0 with status: OK
2026-08-03 17:29:13.167833738 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer WhereDummyDq modified: 0 with status: OK
2026-08-03 17:29:13.170815893 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer TransposeOptimizer modified: 1 with status: OK
2026-08-03 17:29:13.184976398 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_9_out0'. It is no longer used by any node.
2026-08-03 17:29:13.184983442 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_6_out0'. It is no longer used by any node.
2026-08-03 17:29:13.184985626 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_0_out0'. It is no longer used by any node.
2026-08-03 17:29:13.184987820 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_11_out0'. It is no longer used by any node.
2026-08-03 17:29:13.184992930 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_2_out0'. It is no longer used by any node.
2026-08-03 17:29:13.184995464 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_out0'. It is no longer used by any node.
2026-08-03 17:29:13.184998971 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_4_out0'. It is no longer used by any node.
2026-08-03 17:29:13.185003019 [I:onnxruntime:, graph.cc:5632 CleanUnusedInitializersAndNodeArgs] Removing NodeArg 'Transpose_token_7_out0'. It is no longer used by any node.
2026-08-03 17:29:13.187489606 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer Level1_RuleBasedTransformer modified: 0 with status: OK
2026-08-03 17:29:13.187527508 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer DoubleQDQPairsRemover modified: 0 with status: OK
2026-08-03 17:29:13.190120025 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer CommonSubexpressionElimination modified: 1 with status: OK
2026-08-03 17:29:13.206148026 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ConstantFolding modified: 0 with status: OK
2026-08-03 17:29:13.206987525 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer MatMulAddFusion modified: 0 with status: OK
2026-08-03 17:29:13.207824209 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ReshapeFusion modified: 0 with status: OK
2026-08-03 17:29:13.207828317 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer FreeDimensionOverrideTransformer modified: 0 with status: OK
2026-08-03 17:29:13.208635064 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer SliceConcatToSpaceToDepthFusion modified: 0 with status: OK
2026-08-03 17:29:13.208638731 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer GeluFusionL1 modified: 0 with status: OK
2026-08-03 17:29:13.208640975 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer LayerNormFusionL1 modified: 0 with status: OK
2026-08-03 17:29:13.209559554 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer QDQPropagationTransformer modified: 0 with status: OK
2026-08-03 17:29:13.210336555 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer WeightBiasQuantization modified: 0 with status: OK
2026-08-03 17:29:13.211183278 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer EnsureUniqueDQForNodeUnit modified: 0 with status: OK
2026-08-03 17:29:13.211950049 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer WhereDummyDq modified: 0 with status: OK
2026-08-03 17:29:13.213611534 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer Level1_RuleBasedTransformer modified: 0 with status: OK
2026-08-03 17:29:13.213645248 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer DoubleQDQPairsRemover modified: 0 with status: OK
2026-08-03 17:29:13.216073675 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer CommonSubexpressionElimination modified: 0 with status: OK
2026-08-03 17:29:13.217058940 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ConstantFolding modified: 0 with status: OK
2026-08-03 17:29:13.217919339 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer MatMulAddFusion modified: 0 with status: OK
2026-08-03 17:29:13.218798323 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer ReshapeFusion modified: 0 with status: OK
2026-08-03 17:29:13.218801950 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer FreeDimensionOverrideTransformer modified: 0 with status: OK
2026-08-03 17:29:13.219680402 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer SliceConcatToSpaceToDepthFusion modified: 0 with status: OK
2026-08-03 17:29:13.219683739 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer GeluFusionL1 modified: 0 with status: OK
2026-08-03 17:29:13.219686334 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer LayerNormFusionL1 modified: 0 with status: OK
2026-08-03 17:29:13.220632144 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer QDQPropagationTransformer modified: 0 with status: OK
2026-08-03 17:29:13.221449922 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer WeightBiasQuantization modified: 0 with status: OK
2026-08-03 17:29:13.222310421 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer EnsureUniqueDQForNodeUnit modified: 0 with status: OK
2026-08-03 17:29:13.223167794 [I:onnxruntime:, graph_transformer.cc:15 Apply] GraphTransformer WhereDummyDq modified: 0 with status: OK
2026-08-03 17:29:13.223290055 [I:onnxruntime:sample, migraphx_execution_provider_utils.h:273 GenerateGraphId] Model name is 'ssd_mobilenet_v1_coco.onnx'
2026-08-03 17:29:13.223374495 [I:onnxruntime:sample, migraphx_execution_provider_utils.h:273 GenerateGraphId] Model name is 'ssd_mobilenet_v1_coco.onnx'
2026-08-03 17:29:13.223410774 [I:onnxruntime:sample, migraphx_execution_provider_utils.h:273 GenerateGraphId] Model name is 'ssd_mobilenet_v1_coco.onnx'
2026-08-03 17:29:13.223461720 [I:onnxruntime:sample, migraphx_execution_provider_utils.h:273 GenerateGraphId] Model name is 'ssd_mobilenet_v1_coco.onnx'
2026-08-03 17:29:13.223503339 [I:onnxruntime:sample, migraphx_execution_provider_utils.h:273 GenerateGraphId] Model name is 'ssd_mobilenet_v1_coco.onnx'

Thread 1 "migraphx_sample" received signal SIGSEGV, Segmentation fault.
onnxruntime::NodeArg::Name[abi:cxx11]() const (this=0x21) at onnxruntime/core/graph/graph.cc:218
218	  return node_arg_info_.name();
Missing rpms, try: dnf --enablerepo='*debug*' install amdrocm-runtime10.1-debuginfo-10.1.0~20260803-30774164023.x86_64 amdrocm-base10.1-debuginfo-10.1.0~20260803-30774164023.x86_64 zlib-ng-compat-debuginfo-2.3.3-3.fc44.x86_64 amdrocm-sysdeps10.1-debuginfo-10.1.0~20260803-30774164023.x86_64 amdrocm-llvm10.1-debuginfo-10.1.0~20260803-30774164023.x86_64 amdrocm-profiler-base10.1-debuginfo-10.1.0~20260803-30774164023.x86_64 amdrocm-dnn-host10.1-debuginfo-10.1.0~20260803-30774164023.x86_64 amdrocm-blas-host10.1-debuginfo-10.1.0~20260803-30774164023.x86_64
(gdb) print node_arg_info_
❌️ Cannot access memory at address 0x29
(gdb) up
#1  0x00007ffff63d3792 in onnxruntime::NodeArg::Name[abi:cxx11]() const (this=0x21) at onnxruntime/core/providers/shared_library/provider_wrappedtypes.h:924
924	  const std::string& Name() const noexcept { return g_host->NodeArg__Name(this); }
(gdb) print this
$1 = (const onnxruntime::NodeArg * const) 0x21
(gdb) up
#2  onnxruntime::MIGraphXExecutionProvider::GetSubGraph (this=this@entry=0x12dcb80, graph_nodes_index=std::vector of length 345, capacity 345 = {...}, graph=...)
    at onnxruntime/core/providers/migraphx/migraphx_execution_provider.cc:763
763	                          graph_output_names.end(), output->Name()) != graph_output_names.end()) {
(gdb) list
758	          if (iter != fused_inputs.end()) {
759	            fused_inputs.erase(iter);
760	            erased.insert(output);
761	          } else if (erased.find(output) == erased.end()) {
762	            if (std::find(graph_output_names.begin(),
763	                          graph_output_names.end(), output->Name()) != graph_output_names.end()) {
764	              graph_outputs_to_add[output] = output_order;
765	            }
766	            fused_outputs[output] = output_order++;
767	          }
(gdb) bt
#0  onnxruntime::NodeArg::Name[abi:cxx11]() const (this=0x21) at onnxruntime/core/graph/graph.cc:218
#1  0x00007ffff63d3792 in onnxruntime::NodeArg::Name[abi:cxx11]() const (this=0x21) at onnxruntime/core/providers/shared_library/provider_wrappedtypes.h:924
#2  onnxruntime::MIGraphXExecutionProvider::GetSubGraph (this=this@entry=0x12dcb80, graph_nodes_index=std::vector of length 345, capacity 345 = {...}, graph=...)
    at onnxruntime/core/providers/migraphx/migraphx_execution_provider.cc:763
#3  0x00007ffff63d6d6e in onnxruntime::MIGraphXExecutionProvider::GetCapability (this=<optimized out>, graph_viewer=...)
    at onnxruntime/core/providers/migraphx/migraphx_execution_provider.cc:1110
#4  0x00007ffff75b8f45 in operator() (ep=..., graph_viewer=..., kernel_lookup=..., resource_accountant=<optimized out>, graph_optimizer_registry=..., __closure=<optimized out>)
    at onnxruntime/core/framework/graph_partitioner.cc:187
#5  0x00007ffff75b9a8c in onnxruntime::GetCapabilityForEP (params=..., logger=...) at onnxruntime/core/framework/graph_partitioner.cc:306
#6  0x00007ffff75bb019 in onnxruntime::PartitionOnnxFormatModelImpl (graph=..., func_mgr=..., kernel_registry_mgr=..., fused_kernel_registry=..., current_ep=..., 
    mode=onnxruntime::GraphPartitioner::Mode::kNormal, fused_node_unique_id=@0x7fffffffceac: 5, transform_layout_fn=..., debug_graph_fn=..., check_load_cancellation_fn=..., on_partition_assignment_fn=..., 
    logger=..., resource_accountant=0x0, graph_optimizer_registry=..., disable_model_compile=false, layering_index=0x0) at onnxruntime/core/framework/graph_partitioner.cc:686
#7  0x00007ffff75c1e5f in onnxruntime::PartitionOnnxFormatModel (partition_params=..., mode=onnxruntime::GraphPartitioner::Mode::kNormal, execution_providers=..., kernel_registry_manager=..., 
    acc_map=std::optional [no contained value], graph_optimizer_registry=..., logger=..., disable_model_compile=false) at onnxruntime/core/framework/graph_partitioner.cc:1305
#8  onnxruntime::GraphPartitioner::Partition (this=this@entry=0x7fffffffd1b0, graph=..., func_mgr=..., transform_layout_function=..., config_options=..., logger=..., layering_index=0x0, 
    mode=onnxruntime::GraphPartitioner::Mode::kNormal, ep_context_gen_options=..., debug_graph_fn=...) at onnxruntime/core/framework/graph_partitioner.cc:1594
#9  0x00007ffff6c81fbd in onnxruntime::InferenceSession::TransformGraph (this=this@entry=0xa63a90, graph=..., saving_model_in_ort_format=saving_model_in_ort_format@entry=false)
    at onnxruntime/core/session/inference_session.cc:1697
#10 0x00007ffff6c8eca8 in onnxruntime::InferenceSession::Initialize (this=this@entry=0xa63a90) at onnxruntime/core/session/inference_session.cc:2601
#11 0x00007ffff6c12963 in InitializeSession (options=options@entry=0x8e7c90, sess=..., prepacked_weights_container=prepacked_weights_container@entry=0x0)
    at onnxruntime/core/session/utils.cc:601
#12 0x00007ffff6bb8ace in OrtApis::CreateSession (env=<optimized out>, model_path=<optimized out>, options=0x8e7c90, out=0x7fffffffe080) at /usr/include/c++/16/bits/unique_ptr.h:192
#13 0x0000000000400eb6 in Ort::Session::Session(Ort::Env const&, char const*, Ort::SessionOptions const&) ()
#14 0x0000000000400736 in main ()

Urgency

No response

Platform

Linux

OS Version

Fedora 44

ONNX Runtime Installation

Built from Source

ONNX Runtime Version or Commit ID

1.28.0

ONNX Runtime API

C++

Architecture

X64

Execution Provider

MIGraphX

Execution Provider Library Version

ROCm 7.15.0 (20260803-30774164023) / MIGraphX rocm-7.14 tag

[liminfei-amd]

I reproduced this on Radeon RX 9070 / gfx1201 with ROCm 7.2.1 and MIGraphX 2.15. The crash comes from the MIGraphX EP resolving a multi-consumer output edge through the consumer's explicit InputDefs() with GetDstArgIndex(); for a control-flow capture, that index addresses an implicit input and goes out of bounds. The proposed fix in #31623 resolves the value from the source OutputDefs() with GetSrcArgIndex() and adds focused regression coverage; the exact SSD model now initializes with both CPU and MIGraphX EP, and all six MIGraphX EP tests pass. Testing on the reported ROCm 7.15/MIGraphX rocm-7.14 stack would be welcome.

[sdroege]

Thanks, added a comment to the PR. It indeed solves the problem for me too.