<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/128316>128316</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [MLIR]`-one-shot-bufferize=test-analysis-only` triggers Assertion Failure `idx < size()'
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            mlir
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          xisang0
      </td>
    </tr>
</table>

<pre>
    Test on commit: https://github.com/llvm/llvm-project/commit/a9882bda96228ca23e166a817f93a7dbc99763cb
steps to reproduce:
```
mlir-opt test.mlir -one-shot-bufferize=test-analysis-only
```
test case:
```
module {
 func.func @main(%arg0: tensor<13x21x3xf32> {bufferization.access = "read"}) -> (tensor<13x21x3xf32>, tensor<3x1xi32>) {
    %1 = call @reduce_max_constant() : () -> tensor<3x1xi32>
    return {__equivalent_func_args__ = [-1], __inplace_operands_attr__ = ["true"]} %arg0, %1: tensor<13x21x3xf32>, tensor<3x1xi32>
  }

  func.func @reduce_max_constant() -> tensor<3x1xi32> {
    %cst = arith.constant dense<[[1, 2, 3], [4, 5, 6], [7, 8, 9]]> : tensor<3x3xi32>
    %0 = tosa.reduce_max %cst {__inplace_operands_attr__ = ["false"], axis = 1 : i32} : (tensor<3x3xi32>) -> tensor<3x1xi32>
    return {__inplace_operands_attr__ = ["true"]} %0 : tensor<3x1xi32>
 }
}
```
crash trace:
```
mlir-opt: /home/workdir/llvm-project-19/llvm/include/llvm/ADT/SmallVector.h:291: reference llvm::SmallVectorTemplateCommon<llvm::StringRef>::operator[](size_type) [T = llvm::StringRef]: Assertion `idx < size()' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: ./mlir-opt /home/workdir/test.mlir -one-shot-bufferize=test-analysis-only
 #0 0x0000557bbd0dc998 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (./mlir-opt+0x108a998)
 #1 0x0000557bbd0da4be llvm::sys::RunSignalHandlers() (./mlir-opt+0x10884be)
 #2 0x0000557bbd0dd3a8 SignalHandler(int) Signals.cpp:0:0
 #3 0x000071bec347e520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x000071bec34d29fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #5 0x000071bec347e476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #6 0x000071bec34647f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #7 0x000071bec346471b (/lib/x86_64-linux-gnu/libc.so.6+0x2871b)
 #8 0x000071bec3475e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
 #9 0x0000557bbd64ead5 void llvm::function_ref<void (mlir::Operation*)>::callback_fn<annotateOpsWithBufferizationMarkers(mlir::Operation*, mlir::bufferization::OneShotAnalysisState const&)::$_0>(long, mlir::Operation*) OneShotAnalysis.cpp:0:0
#10 0x0000557bbd1ee8de void mlir::detail::walk<mlir::ForwardIterator>(mlir::Operation*, llvm::function_ref<void (mlir::Operation*)>, mlir::WalkOrder) (./mlir-opt+0x119c8de)
#11 0x0000557bbd1ee8de void mlir::detail::walk<mlir::ForwardIterator>(mlir::Operation*, llvm::function_ref<void (mlir::Operation*)>, mlir::WalkOrder) (./mlir-opt+0x119c8de)
#12 0x0000557bbd6489e0 mlir::bufferization::analyzeOp(mlir::Operation*, mlir::bufferization::OneShotAnalysisState&, mlir::bufferization::BufferizationStatistics*) (./mlir-opt+0x15f69e0)
#13 0x0000557bbd6605c4 mlir::bufferization::insertTensorCopies(mlir::Operation*, mlir::bufferization::OneShotBufferizationOptions const&, mlir::bufferization::BufferizationStatistics*) (./mlir-opt+0x160e5c4)
#14 0x0000557bbd648ad8 mlir::bufferization::runOneShotBufferize(mlir::Operation*, mlir::bufferization::OneShotBufferizationOptions const&, mlir::bufferization::BufferizationStatistics*) (./mlir-opt+0x15f6ad8)
#15 0x0000557bbd61c9ce (anonymous namespace)::OneShotBufferizePass::runOnOperation() Bufferize.cpp:0:0
#16 0x0000557bc03ad3bf mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (./mlir-opt+0x435b3bf)
#17 0x0000557bc03adba2 mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (./mlir-opt+0x435bba2)
#18 0x0000557bc03b034e mlir::PassManager::run(mlir::Operation*) (./mlir-opt+0x435e34e)
#19 0x0000557bc03a8e6b performActions(llvm::raw_ostream&, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, mlir::MlirOptMainConfig const&) MlirOptMain.cpp:0:0
#20 0x0000557bc03a8acb llvm::LogicalResult llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&)::$_0>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) MlirOptMain.cpp:0:0
#21 0x0000557bc0451df5 mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>, llvm::raw_ostream&, llvm::StringRef, llvm::StringRef) (./mlir-opt+0x43ffdf5)
#22 0x0000557bc03a39b2 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&) (./mlir-opt+0x43519b2)
#23 0x0000557bc03a3c63 mlir::MlirOptMain(int, char**, llvm::StringRef, llvm::StringRef, mlir::DialectRegistry&) (./mlir-opt+0x4351c63)
#24 0x0000557bc03a3e72 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&) (./mlir-opt+0x4351e72)
#25 0x0000557bbd0bbc27 main (./mlir-opt+0x1069c27)
#26 0x000071bec3465d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#27 0x000071bec3465e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#28 0x0000557bbd0bb795 _start (./mlir-opt+0x1069795)
Aborted (core dumped)
```
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzkWV1v2zjW_jXMDWGDor4vfOE4Nd4CEyRog3cuBYo8srmRSQ1Jtc78-gUlu5JVKx13ZrE7u0UruxJ5znOe8ymaWSt3CmCF4nsUP9yx1u21WR2lZWpH7kot3lYvYB3WCnN9OEiHwjXeO9dYFK4R3SK63Um3b8sl1wdEt3X95fyxaIz-B3CH6Pa0lW5ZnmW0FCxPKM04oyEEScKyIK3ykKWi5HmeJiEvEVlbB43FTmMDjdGi5eA1kjVKyOkvWR9qaRa6cdiBdUv_P7zQChZ2r92ibKsKjPwdUPjgny-YYvWblXahVf02keQXYM7sNSVatDVglN4jssZVq_jSXzCKyIFJhWiGaMzMjnhqHCirDQo3QXikwTE8ViFF4Qe_-4yHOanVknEO1mIUPmBEqQEmEKUofUA0x4tuB81mhCG6GfSEx-AoT7fzM0iMMaJx0EnnrK49VgOew-LAjgXXyjqmXAc9xx736Wun-ZrsXqgB1xrltRQF_NbKL6wG5QpPR8HMzhZFb1B8vwhQ_OCBFoVUTc04FLoBw5SwBXPODCsRpc604K2PH1Dq6ejZpJvOiHdYnSPCg_VUknX39cJl8zTM2X5JKreuQ86MdPvlWQQWoHzsbLo8ug88Muov4YkGFN9H_jP2l2S4mfrPzF9yfzN-6BSOTQ6P4aUTEI1JB8Fpy5aDPd_Qee_8mPSK1fbMOt1gdpR9NAadeq_R-6IPjWtgbouWnwgCMuVhLP7k3v46SlZumN1jZ9h75aK3arvXB0B0-1WbVyHNpGotgnwoZ1LxuhUw3Fg_vCC6_Xxgdf3_wJ02yz0K1zTvotVABQYUB9ytDtcoXI-WvsChqZmDjT4ctELhZrTKGal2n6DyVnZ3Or6cNn19RjSz8nco3FsDXebG9y8dhddE-Fha47W1YHzFwSghUhwxCjfYC-mjHtEUV0zWIJaIrJ9_-bD-_AHbtjxIhxku250vv9o4X4hvLvvS2hYsolvMlMAnErHbA-7dVDL-2rnK6_7sGH_Foj00vePIEnd_no3eGXbAzOzaAyjnEeAlottvxf-aK3-qIWBEQ4LJkRBC4jgtS0EEz_NsRK99s_2XZyOV6zC_dMFGs2GRYV8LbZ0BdkA08dklfZXJfSqNkSN6T44ByVied77oEQQTBCwq4RqCT636LHeK1f_HlKjB2HM5v64ki0oYlNCJEhGyDF-IQzQ7oe5v2yVvvGtI96-XEp6kpEEJPIxSiCnpW8m2liWi22OWFEm0qKVqj4udavsHfGn1MumARTSmZIAVXQoUNK84btze98fiVfpOdov0PMkrPkiPp3CjNME725l3K-woTQbByaXgJEqrELPS581NYmmWVuEgNv1ObFDeLDAoB4HZhIAY8uQ2gWEO-cjw_CKMkgiYiPEXLcUoYH3n9QWoML6ubbqniGY-PvsFT12Nk1ohuvaiz7XPTy6-RBSVr5JMKe2Yg6fG_ird_n48TT0y89onwJzUDR6eXAxip8UKPu-1W58KwmevCHfNvUvgvF-FaFSQrvdltVa7S6kTK_BE5CR7fJ5flpoAIBPQkzdIFeCYrPvvX1n9isLN8HCrzVdmxEd36hEdsnkG_pxLLoz9ldWvT0b4KjFTcIKcZ-JUcLyxwf-SsXSSFlkO5P0A7FrR7_DU_LUxfGo_7-67yCS_S1onuT2F8VV74yrJgQz2hpf2JiTm0ftKpfJjyUs33G10I-HPJ--FHU-Nv9pRDv_1LCQEYh4NLERTrzORva_UtGoCHv5-NMRVwkQ20BBf0hDwnIPfyZRWbwfdWqzYAWzTTU35VezwzKwdUTTioRtxvq27UlWTkXpOQibCspqpMU_Ni35qvK61YE1XVE4qL7zQgZk6YN415wR8ZIrtfNHY4FLr2n-2qjtuEe_Ng1EYl2FZDXymU4NKRm826Fk2UEs1DS-_9BvO5C-3cLzJq_qorDPdFK_Nd1IvF4xi8oz9mRlQ7qOq9DmeZ4PSk1gyOpCYXZJYkjCCie6zNVdjYNrdZ5RCGI3aQD7xXAZJiRswlTaHddeT7A_eG6wTp6l_zwyIonHm8oVRt4bD4863w5kkf_zl46eNVg6O7jvKH2tpnhr3yKTaaFXJ3XjmwaOn3-cZJVPjGC9HXfcXvZOc1Z_AtrWb78ZzG_yb7tn2VsnfWvjO9kc4aPPWl4ILrgRUrK1dIaAGB_N7_Jz54XJWmHpgbhi9SuEf9eW_3J4B3YNkNXD3CXbSOvP2fXC8FwCzQ-9_hGd-EJ7BRXhGcSCqeGS4bWrp1ko8G83B2jPWf0vQ_Q1T4t0Vm6vHUXO352ppVYkq_lZLKZ2UmzAv6fVA_m9Lw7leE-Tl0OBoOOWHJ-EsP6fmzPesb8PrW532I-PmQfMkHEBHU9CQzjv1FtA_iw7SEaWXgywpS05TfGBSzRyxJTmn6bB9eigUi_zGwzGai3x4y6LT46AYIoKLwu8prGPGFWdwt6iAaKQim5qc5jHuhc8aneanNF2X2jjoXq65NtCd5YI4CT8fw9-JVSjyMGd3sArSiNAgDHJyt1_lLBOxSJMoFhUnVUZEnpQVYTTPk4hzdidXlNCYUEpJFoYBWVJGgpyEaRCIMmFphSICBybrpQ-KpTa7u-4AehXQLAySu5qVUNtV_2tDFyDdrw13ZtUdW5ftzqKI1NI6O0hw0tXdr6N-jELxA0rIHz5QTgh2Ru52YOzoGH7LZN0amD2Ov2tNvfr5o_aTsV9W9J8BAAD__-MNEfI">