<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/108700>108700</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [SLPVectorizer] Assertion `OpIdx < Operands.size() && "Off bounds"' failed.
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            llvm:SLPVectorizer,
            crash-on-valid
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          dtcxzyw
      </td>
    </tr>
</table>

<pre>
    Reproducer: https://godbolt.org/z/8Es17cqcW
```
; bin/opt -passes=slp-vectorizer reduced.ll -S
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

define i16 @main() {
entry:
  %conv73.i.peel.i.i.i.i.i = xor i64 0, 0
 %and.i.i.peel.i.i.i.i.i = and i64 0, 0
  %xor2.i.i.peel.i.i.i.i.i = or i64 %and.i.i.peel.i.i.i.i.i, 0
  %sub.i.i.peel.i.i.i.i.i = or i64 %xor2.i.i.peel.i.i.i.i.i, 0
  %xor3.i.i.peel.i.i.i.i.i = xor i64 %sub.i.i.peel.i.i.i.i.i, %conv73.i.peel.i.i.i.i.i
 %and4.i.i.peel.i.i.i.i.i = and i64 %xor3.i.i.peel.i.i.i.i.i, 0
 %cmp.i.i.peel.i.i.i.i.i = icmp slt i64 %and4.i.i.peel.i.i.i.i.i, 0
  %0 = trunc i64 %conv73.i.peel.i.i.i.i.i to i16
  %1 = or i16 0, %0
 %conv73.i.i.i.i.i.i = xor i64 0, 0
  %and.i.i.i.i.i.i.i = and i64 0, 0
 %xor2.i.i.i.i.i.i.i = or i64 %and.i.i.i.i.i.i.i, 0
  %sub.i.i.i.i.i.i.i = or i64 %xor2.i.i.i.i.i.i.i, 0
  %xor3.i.i.i.i.i.i.i = xor i64 %sub.i.i.i.i.i.i.i, %conv73.i.i.i.i.i.i
  %and4.i.i.i.i.i.i.i = and i64 %xor3.i.i.i.i.i.i.i, 0
  %cmp.i.i.i.i.i.i.i = icmp slt i64 %and4.i.i.i.i.i.i.i, 0
  %2 = trunc i64 %conv73.i.i.i.i.i.i to i16
  %3 = or i16 0, %2
  %4 = select i1 %cmp.i.i.i.i.i.i.i, i16 0, i16 %3
  %5 = select i1 %cmp.i.i.peel.i.i.i.i.i, i16 0, i16 %1
  %6 = zext i32 0 to i64
  %add.i.i.peel.i369.i.i.i.i = or i64 %6, 0
 %or.i.peel.i371.i.i.i.i = or i64 %add.i.i.peel.i369.i.i.i.i, 0
 %conv72.i.peel.i372.i.i.i.i = shl i64 %or.i.peel.i371.i.i.i.i, 0
 %sext.i.peel.i373.i.i.i.i = ashr i64 %conv72.i.peel.i372.i.i.i.i, 0
 %conv73.i.peel.i374.i.i.i.i = xor i64 %sext.i.peel.i373.i.i.i.i, 0
 %and.i.i.peel.i376.i.i.i.i = and i64 0, 0
  %xor2.i.i.peel.i377.i.i.i.i = or i64 %and.i.i.peel.i376.i.i.i.i, 0
  %sub.i.i.peel.i378.i.i.i.i = or i64 %xor2.i.i.peel.i377.i.i.i.i, 0
  %xor3.i.i.peel.i379.i.i.i.i = xor i64 %sub.i.i.peel.i378.i.i.i.i, %conv73.i.peel.i374.i.i.i.i
 %and4.i.i.peel.i380.i.i.i.i = and i64 %xor3.i.i.peel.i379.i.i.i.i, 0
 %cmp.i.i.peel.i381.i.i.i.i = icmp slt i64 %and4.i.i.peel.i380.i.i.i.i, 0
 %7 = trunc i64 %conv73.i.peel.i374.i.i.i.i to i16
  %8 = or i16 0, %7
 %9 = select i1 %cmp.i.i.peel.i381.i.i.i.i, i16 0, i16 %8
 %conv76.i.i.i.i.i.i = and i16 %4, %5
  %conv76.i.peel.i384.i.i.i.i = and i16 %conv76.i.i.i.i.i.i, %9
  %10 = zext i32 0 to i64
 %add.i.i.peel.i417.i.i.i.i = or i64 %10, 0
  %or.i.peel.i419.i.i.i.i = or i64 %add.i.i.peel.i417.i.i.i.i, 0
  %conv72.i.peel.i420.i.i.i.i = shl i64 %or.i.peel.i419.i.i.i.i, 0
  %sext.i.peel.i421.i.i.i.i = ashr i64 %conv72.i.peel.i420.i.i.i.i, 0
  %conv73.i.peel.i422.i.i.i.i = xor i64 %sext.i.peel.i421.i.i.i.i, 0
  %and.i.i.peel.i424.i.i.i.i = and i64 0, 0
  %xor2.i.i.peel.i425.i.i.i.i = or i64 %and.i.i.peel.i424.i.i.i.i, 0
 %sub.i.i.peel.i426.i.i.i.i = or i64 %xor2.i.i.peel.i425.i.i.i.i, 0
 %xor3.i.i.peel.i427.i.i.i.i = xor i64 %sub.i.i.peel.i426.i.i.i.i, %conv73.i.peel.i422.i.i.i.i
  %and4.i.i.peel.i428.i.i.i.i = and i64 %xor3.i.i.peel.i427.i.i.i.i, 0
  %cmp.i.i.peel.i429.i.i.i.i = icmp slt i64 %and4.i.i.peel.i428.i.i.i.i, 0
  %11 = trunc i64 %conv73.i.peel.i422.i.i.i.i to i16
  %12 = or i16 0, %11
  %13 = select i1 %cmp.i.i.peel.i429.i.i.i.i, i16 0, i16 %12
 %conv76.i.peel.i432.i.i.i.i = and i16 %conv76.i.peel.i384.i.i.i.i, %13
 ret i16 %conv76.i.peel.i432.i.i.i.i
}
```
```
opt: /root/llvm-project/llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp:3180: llvm::slpvectorizer::BoUpSLP::ValueList& llvm::slpvectorizer::BoUpSLP::TreeEntry::getOperand(unsigned int): Assertion `OpIdx < Operands.size() && "Off bounds"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/opt -o /app/output.s -S --passes=slp-vectorizer <source>
1.      Running pass "function(slp-vectorizer)" on module "<source>"
2.      Running pass "slp-vectorizer" on function "main"
 #0 0x0000000005016bb8 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x5016bb8)
 #1 0x00000000050142fc SignalHandler(int) Signals.cpp:0:0
 #2 0x00007955e2242520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #3 0x00007955e22969fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #4 0x00007955e2242476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #5 0x00007955e22287f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #6 0x00007955e222871b (/lib/x86_64-linux-gnu/libc.so.6+0x2871b)
 #7 0x00007955e2239e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
 #8 0x000000000406f2b8 llvm::slpvectorizer::BoUpSLP::TreeEntry::getOperand(unsigned int) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x406f2b8)
 #9 0x00000000040f675e llvm::slpvectorizer::BoUpSLP::getEntryCost(llvm::slpvectorizer::BoUpSLP::TreeEntry const*, llvm::ArrayRef<llvm::Value*>, llvm::SmallPtrSetImpl<llvm::Value*>&)::'lambda0'(llvm::function_ref<llvm::InstructionCost (unsigned int)>, llvm::function_ref<llvm::InstructionCost (llvm::InstructionCost)>)::operator()(llvm::function_ref<llvm::InstructionCost (unsigned int)>, llvm::function_ref<llvm::InstructionCost (llvm::InstructionCost)>) const SLPVectorizer.cpp:0:0
#10 0x00000000040f74aa llvm::slpvectorizer::BoUpSLP::getEntryCost(llvm::slpvectorizer::BoUpSLP::TreeEntry const*, llvm::ArrayRef<llvm::Value*>, llvm::SmallPtrSetImpl<llvm::Value*>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x40f74aa)
#11 0x0000000004114641 llvm::slpvectorizer::BoUpSLP::getTreeCost(llvm::ArrayRef<llvm::Value*>) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x4114641)
#12 0x00000000041198c8 (anonymous namespace)::HorizontalReduction::tryToReduce(llvm::slpvectorizer::BoUpSLP&, llvm::DataLayout const&, llvm::TargetTransformInfo*, llvm::TargetLibraryInfo const&) SLPVectorizer.cpp:0:0
#13 0x000000000411bfe1 llvm::SLPVectorizerPass::vectorizeHorReduction(llvm::PHINode*, llvm::Instruction*, llvm::BasicBlock*, llvm::slpvectorizer::BoUpSLP&, llvm::TargetTransformInfo*, llvm::SmallVectorImpl<llvm::WeakTrackingVH>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x411bfe1)
#14 0x0000000004120876 llvm::SLPVectorizerPass::vectorizeRootInstruction(llvm::PHINode*, llvm::Instruction*, llvm::BasicBlock*, llvm::slpvectorizer::BoUpSLP&, llvm::TargetTransformInfo*) (.constprop.0) SLPVectorizer.cpp:0:0
#15 0x0000000004124e16 llvm::SLPVectorizerPass::vectorizeChainsInBlock(llvm::BasicBlock*, llvm::slpvectorizer::BoUpSLP&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x4124e16)
#16 0x000000000412b2e1 llvm::SLPVectorizerPass::runImpl(llvm::Function&, llvm::ScalarEvolution*, llvm::TargetTransformInfo*, llvm::TargetLibraryInfo*, llvm::AAResults*, llvm::LoopInfo*, llvm::DominatorTree*, llvm::AssumptionCache*, llvm::DemandedBits*, llvm::OptimizationRemarkEmitter*) (.part.0) SLPVectorizer.cpp:0:0
#17 0x000000000412bf6b llvm::SLPVectorizerPass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x412bf6b)
#18 0x0000000002f0034e llvm::detail::PassModel<llvm::Function, llvm::SLPVectorizerPass, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x2f0034e)
#19 0x0000000004e18ff8 llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x4e18ff8)
#20 0x0000000000e06a0e llvm::detail::PassModel<llvm::Function, llvm::PassManager<llvm::Function, llvm::AnalysisManager<llvm::Function>>, llvm::AnalysisManager<llvm::Function>>::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0xe06a0e)
#21 0x0000000004e17a1e llvm::ModuleToFunctionPassAdaptor::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x4e17a1e)
#22 0x0000000000e0621e llvm::detail::PassModel<llvm::Module, llvm::ModuleToFunctionPassAdaptor, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0xe0621e)
#23 0x0000000004e17450 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x4e17450)
#24 0x00000000008fce52 llvm::runPassPipeline(llvm::StringRef, llvm::Module&, llvm::TargetMachine*, llvm::TargetLibraryInfoImpl*, llvm::ToolOutputFile*, llvm::ToolOutputFile*, llvm::ToolOutputFile*, llvm::StringRef, llvm::ArrayRef<llvm::PassPlugin>, llvm::ArrayRef<std::function<void (llvm::PassBuilder&)>>, llvm::opt_tool::OutputKind, llvm::opt_tool::VerifierKind, bool, bool, bool, bool, bool, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x8fce52)
#25 0x00000000008efcdc optMain (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x8efcdc)
#26 0x00007955e2229d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#27 0x00007955e2229e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#28 0x00000000008e77ae _start (/opt/compiler-explorer/clang-assertions-trunk/bin/opt+0x8e77ae)
Program terminated with signal: SIGSEGV
Compiler returned: 139
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzcW1tz2zjS_TX0C0oqEqB4efCDfNEk9TlfXFY28-gCSUjGmgS4AOjY-fVbACkZ4MWSMpqq2cw4skiiT3cfHDQuTLCUdMsIufQWV97i5gI36omLy0Llrz_fflxkvHi7fCC14EWTE-GhJXhSqpYeWnpw5cHVlhcZL9Wci60HVz89uEpuZRDn_8n_9Pwbz196kd_9tJfoCmSUeXDFawVmNZaSSA_dyLKevZBccUF_EgEE0f6KeVmC2bq1VFhsiQIFVrjEb7xRwEM3wIOQzCoPLcmshrHvoSWC5kNfBu6l_haF5mNG918CmHhoGcBktkn87hszt6KdeRTO1roZhE4oStC6JLswXpPoMQpnDXtm_AeblZQ1r7Mta_ZW7WdBNpQRQIMIeKFfYc1F4sEUePFV24IwJd40weYKAA8ucs5eYjSn85qQck53_xvXr1wAGoXA9-A16FjWNpgVptWICWbF0ETbvHIBp4w6N5PIfSzZZIehJhyOxIWmwF7f0cZdarBpDh3CwkOMTcfSYz-v6iksmlc1kKWy6Bzz2-fAN8ZKNCzfWU7JQnGtL8s22NMeRG2va0Ar2h3QEdKyFXCErOxOPiSog1o6KKPDCjoonknd9CXj9N1huUyGtpPKkSqZxIEfCOQDbaAxbUCrQWgaSFKSXAEajIaszfb2prbBBbIwFtMYQ9X3gQILKDJAP8mrAhRB4Jt8otDuksKuTihKJzQT9VTKxbtRHEwpdQq8P_w18dAChA6gfCp3iONue3CSvCqrGXLFJp-E0-GjfscCRFbDcHJcTPj-cLpBcXS4NIxMACiOD9SIAf7H8w6Kk0M1Y-D5wOyD4vRQDRn4Hp-DLNYnpyGU-AdLyyCuDycjlATHVZpBAD3Y-OCMZMtqUHiSscITv8Onh2qGlchY2Uh6ao_Gy3TbOOz8L_qrrshyF05ZD_E7uNSehP0Pa9eguoTB1FgIBsPIqiJhMFXxJuEHM5JbRULoH1G9LL-DIWmXkBAGx5Yvy_FoiMhqCY-qX5bzqTXNruFIZx9RwEK4OKqAWfj9Wu_UkBBGx9Uvy_Fw-YWchvFx5ctyPV6-LNLHlkS7RsmR9csKbGqJtGuYnlLArAj6uEFwsITZyhquq-FYDQvsBUuADpUxK53R1Q8cqWOdJYIHK9Kgdu2C3C3PBFETRhZ8t4ONb8Y39e4lr5WHdLwrwbny4KosX6pZLfi_Sb671L9o5sHVN4GZ3HBRSQ-uvu9OADy4Wt_d7y_FPK9rvRsPzBYdGAS09NBSlvX7sUF764r_q17f3bcX33HZkDsqlQejE8y-CUJud_twtNwS9bUmArPCg0nDzJFJAShTHkx1PEspiVCUM-BF_tf6c_EKPHQNOhs5lyaldpsPIx2KB-HXzQZkvGGF9CD0YAw2mJakmLck3t_dLte3QDZZRRXAIGu2QJCaC6Vl2DuEoeqpyeY5ryx2Xc6plA3RFLciYXnZFASoJwJygeUTyHD-rATOSed-rXD-DIqmqvcnEf7c89N7wbcCVwCLbVMRpmTX07rP4SrnVU1LImbktS65IELfKzHbzvCOITnTo-3ZgyvrGIhrCFzX-rpRdaPmEszWYDZ5PuSha8kbkRMP3bbRBTq6h4YxyrZAm2mKNw3LtVMPJi6A7jcIAWeg4kVTEt3Ywdwd2sAx2D6WAdr50g3aY533gYt84L_6u_8WfhBlWWLL8U22X-4FZcpw_013hgeT90YC_3jkUgmCKyOi606AwCjrL_WAB6_81y4sTc0-7qAXdwg3OVjTLcPlJ8yKUuMnXRjtbdkNVd_82QPBDihOFwsCYQgX0O8Cb-tAd3xmHZvpB_lc8nlkwjMmTnDIxUyjdJODWj0JgovHZ1qWpzkw9o6DsB90GEdgK02epwYfxpGDvXCxYRJvEMCZHt8nIRtDBzkaIAfZyZhB5mDGLiZKSRqdhmlMHMzE1lboRxvojonzlehzjZAuSCeL1M1iE8ULckIWW6JMEtdcT1HJL6QPcs607VJXhHf7pRD47YFsPHT9ftPMhrqprnB263WFy_JeiTVRn6u6nDaK2hnPTD1xiauswL4HYyf0XSV8FD33n5lUojHPdL5gbDLtBXYK1uTDHXAXOdc6UVy0M_L_SOhtN4OxVZFVanXJ9nuKjEOMf3NFnm-AG7b2A1zT6UyBYRCEURicRqcmZsDmYTbOl1UbtJMV7GWVJnmi_WHG2VvFGwkYroiszSKkGzefdJKcKVw-kKKVaPtAibdv3NwjxyqmXcC8N73BCt-1r_U69fQafDPv3Pa7hc9swwcKa9vc0Uxg8aZbWFjpMUMH9VjJNsTuawfhHstu0bbP8RMX78zYRNx_-vz_vCCDgK3BPnh2hSXNr0qePw8encDrMbSZodYmNhhqfxJslqLPlG2_fzr_gGs5dqQZup0A_SSOTuiEB86Vw-s_uh8Mk3Mj01rweu4fqdRFj6SQBKeQdP2EKZOfWZdXco50zygKk44jiqiXbwaPGZmiYUbRdoKr_Z6w10XrHJdY3L7wshkVwi9VoOEsuHwgsimVHDy547weNbnhFWV6waInkiGglE1Vm_UCzp-Gz29IhVlBiis64vNrrWhFf2Jt_kAqLJ5vK6qU7q29OGss1NG6jPv9tImyo_rpuD5aMly-SSq_YIa3WoTXI0bnL1ImDUePzuYFbnwfhfayvyAK07IrOljKL7wg5Xi0rgYH_PxS-vrnn89rR5vDq7udIkGy2dibQsPlRzH-xnR1bNh0QWet7xM_wv45ZPi30fwbd09LvtM7QU_MMQ7s3vlijh6_8V1ImvVlgWu9NR1NuDU4Kd3O5G_Qok7GyRb2tQiD07S4S-_6SI5-gYQpKf1zmG15c4hFfRmFC_-IwTpG5-_CUseCQ5Ozb_CTTU4W0IpSNEY897QmJWXuRnWtBGVbvRsfEd_EWv4Lzp8MzqElYLsC7bfivPxqXnWsaDkC8pceT6QzeuRgOCmbLWXD-vzeXqqivbd_o4KuXzgt3LMrjXXV0LLQXRl1R1d9VF6rR8V5VwnaLP6PsuKjVt-JoBtKxK5dpp-c_Pts6mu15Yhv4YqPbPIiB7xWXzBlZ3NrUB23_bP-tEhPfK1iTBzMuI9JQh88PmqzR6mwUI_Ve1JHeyGh6yXpERbHmIAW_3x8adC9192rS0WE2U-RAvyg6gm073M8tATrz3-sb__43ja_7hwDQVQjGNEDAAQo7b3yviguUZGiFF-QyyCGEYLBIkovni6jzI9CkuAEx5sixUW2yfw4C1GQoYBgnF7QS-jD0E-DMEBh5KfzMEjSNMlggYNFksWxF_qkwrSc62Ex52J7Yd7iXgZ-Evv-RYkzUkrzF_ch7EaOs38wr5WvPQjNK94ZZ7MXXNJC317cXIhL84o4a7bSC_2SSiXfHSmqSvNvAlzAxc15X3VfNKK8_PV32R0RL5fwvwEAAP__k3Jr_Q">