<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/148372>148372</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [MLIR] Crash in `-sparsifier="vl=8"` pass when running ElementwiseOpFusion on dynamic-rank tensors with assertion message '__n < this->size()'
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            mlir
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          sweead
      </td>
    </tr>
</table>

<pre>
    test commit: [f2e244f](https://github.com/llvm/llvm-project/commit/f2e244f443c99f814216bef37a82f1b8d3e5975d)

step to reproduce:
```
mlir-opt -sparsifier="vl=8" test.mlir
```

minimal test case:

```
#map = affine_map<(d0, d1) -> (d0, d1)>
module {
 func.func @main() {
    %c9 = arith.constant 9 : index
    %c16 = arith.constant 16 : index
    %c18 = arith.constant 18 : index
    %c21 = arith.constant 21 : index
    %c23 = arith.constant 23 : index
    %c27 = arith.constant 27 : index
    %c28 = arith.constant 28 : index
    %c30 = arith.constant 30 : index
    %0 = tensor.empty() : tensor<17x17xi1>
    %1 = tensor.empty(%c30, %c9) : tensor<?x?xi1>
    %alloc = memref.alloc(%c9, %c9) : memref<?x?x1xi32>
    %collapsed = tensor.collapse_shape %1 [[0, 1]] : tensor<?x?xi1> into tensor<?xi1>
    %2 = tensor.empty(%c21) : tensor<?xi1>
    %mapped = linalg.map ins(%collapsed : tensor<?xi1>) outs(%2 : tensor<?xi1>)
      (%in: i1) {
        %3 = index.mul %c23, %c30
 %4 = index.shru %c30, %c27
        %false = index.bool.constant false
 %alloc_0 = memref.alloc(%c16, %3) : memref<?x?xf16>
 linalg.generic {indexing_maps = [#map, #map, #map], iterator_types = ["parallel", "parallel"]} ins(%alloc_0, %alloc_0 : memref<?x?xf16>, memref<?x?xf16>) outs(%alloc_0 : memref<?x?xf16>) {
        ^bb0(%in_1: f16, %in_2: f16, %out: f16):
          %alloc_3 = memref.alloc(%4, %3) : memref<?x?x1x7xi32>
          linalg.broadcast ins(%alloc : memref<?x?x1xi32>) outs(%alloc_3 : memref<?x?x1x7xi32>) dimensions = [3]
 linalg.yield %in_2 : f16
        }
        linalg.yield %false : i1
 }
    return
  }
}
```

Crash backtrace:
```
/usr/lib/gcc/x86_64-linux-gnu/11/../../../../include/c++/11/bits/stl_vector.h:1045: reference std::vector<mlir::BlockArgument>::operator[](size_type) [_Tp = mlir::BlockArgument, _Alloc = std::allocator<mlir::BlockArgument>]: Assertion '__n < this->size()' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace.
Stack dump:
0.      Program arguments: mlir-opt -sparsifier=vl=8 test.mlir
 #0 0x000055a21cf7a028 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/home/workdir/llvm-project/build/bin/mlir-opt+0x1421028)
 #1 0x000055a21cf776a5 llvm::sys::RunSignalHandlers() (/home/workdir/llvm-project/build/bin/mlir-opt+0x141e6a5)
 #2 0x000055a21cf7b141 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
 #3 0x00007f41ccaad520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x00007f41ccb019fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #5 0x00007f41ccaad476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #6 0x00007f41cca937f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #7 0x000055a21cf668bf (/home/workdir/llvm-project/build/bin/mlir-opt+0x140d8bf)
 #8 0x000055a21dbf1662 mlir::linalg::detail::LinalgOpTrait<mlir::linalg::GenericOp>::payloadUsesValueFromOperand(mlir::OpOperand*) (/home/workdir/llvm-project/build/bin/mlir-opt+0x2098662)
 #9 0x000055a21df1f898 (anonymous namespace)::RemoveOutsDependency::matchAndRewrite(mlir::linalg::GenericOp, mlir::PatternRewriter&) const ElementwiseOpFusion.cpp:0:0
#10 0x000055a222d69132 void llvm::function_ref<void ()>::callback_fn<mlir::PatternApplicator::matchAndRewrite(mlir::Operation*, mlir::PatternRewriter&, llvm::function_ref<bool (mlir::Pattern const&)>, llvm::function_ref<void (mlir::Pattern const&)>, llvm::function_ref<llvm::LogicalResult (mlir::Pattern const&)>)::$_0>(long) PatternApplicator.cpp:0:0
#11 0x000055a222d65e2f mlir::PatternApplicator::matchAndRewrite(mlir::Operation*, mlir::PatternRewriter&, llvm::function_ref<bool (mlir::Pattern const&)>, llvm::function_ref<void (mlir::Pattern const&)>, llvm::function_ref<llvm::LogicalResult (mlir::Pattern const&)>) (/home/workdir/llvm-project/build/bin/mlir-opt+0x720ce2f)
#12 0x000055a2204d327a (anonymous namespace)::GreedyPatternRewriteDriver::processWorklist() GreedyPatternRewriteDriver.cpp:0:0
#13 0x000055a2204cfad3 mlir::applyPatternsGreedily(mlir::Region&, mlir::FrozenRewritePatternSet const&, mlir::GreedyRewriteConfig, bool*) (/home/workdir/llvm-project/build/bin/mlir-opt+0x4976ad3)
#14 0x000055a21df14365 (anonymous namespace)::LinalgElementwiseOpFusionPass::runOnOperation() ElementwiseOpFusion.cpp:0:0
#15 0x000055a220451a93 mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48f8a93)
#16 0x000055a220452332 mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48f9332)
#17 0x000055a2204587be auto void mlir::parallelForEach<__gnu_cxx::__normal_iterator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo*, std::vector<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo, std::allocator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo>>>, mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::$_0>(mlir::MLIRContext*, __gnu_cxx::__normal_iterator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo*, std::vector<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo, std::allocator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo>>>, __gnu_cxx::__normal_iterator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo*, std::vector<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo, std::allocator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo>>>, mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::$_0&&)::'lambda'(__gnu_cxx::__normal_iterator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo*, std::vector<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo, std::allocator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo>>>&&)::operator()<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo&>(__gnu_cxx::__normal_iterator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo*, std::vector<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo, std::allocator<mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool)::OpPMInfo>>>&&) const Pass.cpp:0:0
#18 0x000055a220453b8b mlir::detail::OpToOpPassAdaptor::runOnOperationAsyncImpl(bool) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48fab8b)
#19 0x000055a220451bec mlir::detail::OpToOpPassAdaptor::run(mlir::Pass*, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48f8bec)
#20 0x000055a220452332 mlir::detail::OpToOpPassAdaptor::runPipeline(mlir::OpPassManager&, mlir::Operation*, mlir::AnalysisManager, bool, unsigned int, mlir::PassInstrumentor*, mlir::PassInstrumentation::PipelineParentInfo const*) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48f9332)
#21 0x000055a220454b0e mlir::PassManager::run(mlir::Operation*) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48fbb0e)
#22 0x000055a22044ca7b performActions(llvm::raw_ostream&, std::shared_ptr<llvm::SourceMgr> const&, mlir::MLIRContext*, mlir::MlirOptMainConfig const&) MlirOptMain.cpp:0:0
#23 0x000055a22044c6d4 llvm::LogicalResult llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>::callback_fn<mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&)::$_0>(long, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&) MlirOptMain.cpp:0:0
#24 0x000055a2204fc425 mlir::splitAndProcessBuffer(std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::function_ref<llvm::LogicalResult (std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, llvm::raw_ostream&)>, llvm::raw_ostream&, llvm::StringRef, llvm::StringRef) (/home/workdir/llvm-project/build/bin/mlir-opt+0x49a3425)
#25 0x000055a2204458c2 mlir::MlirOptMain(llvm::raw_ostream&, std::unique_ptr<llvm::MemoryBuffer, std::default_delete<llvm::MemoryBuffer>>, mlir::DialectRegistry&, mlir::MlirOptMainConfig const&) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48ec8c2)
#26 0x000055a220445b78 mlir::MlirOptMain(int, char**, llvm::StringRef, llvm::StringRef, mlir::DialectRegistry&) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48ecb78)
#27 0x000055a220445d92 mlir::MlirOptMain(int, char**, llvm::StringRef, mlir::DialectRegistry&) (/home/workdir/llvm-project/build/bin/mlir-opt+0x48ecd92)
#28 0x000055a21cf58a67 main (/home/workdir/llvm-project/build/bin/mlir-opt+0x13ffa67)
#29 0x00007f41cca94d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#30 0x00007f41cca94e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#31 0x000055a21cf58505 _start (/home/workdir/llvm-project/build/bin/mlir-opt+0x13ff505)
Aborted (core dumped)
```


</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzsW19v27iy_zTMC1FDIvX3IQ-OHe8t0CJB23vvo0BJlM1TitQhqTbeT39ASrYlWa6brdvFWXSRZG1qOP9-M8MhxRKt2VZQeg_CBxCu70hrdlLd66-UkvIul-X-3lBtYCHrmhmAlxCEDxWiKAgqEK4BSnbGNBrgJUAbgDZbZnZtvihkDdCG8y-H_71plPwXLQxAm54V2vRsggAXaVolfoD8KKcVjkmCKj9PSkzDNA5LgFLgLYG31IY20EioaKNk2RbUivWWIPL6H29Zc6beyMbAN7ohSrOKUQXwGiD0hQO8TgBC0Bq0sISTuXY6E6wmHHY2E32QMCFEuCYNBHgNSVUxQbOaNACvAEpKD6AVLH2AUvgG4Ec4HgP40UqRZcspBPED8JawakWxsH8gCLyaMAFQYqf3jyGEAIVF2olTzOwWhRTaEGGgHVxCJkr6MiD1ozlaNzpDnMwSJ7PEyJ8jdqMzxHiWGM8Tx7PE8TzxrM5oXmfszRG70TPijtRQoaVa0Lox-wMWeNkPA7zy4xc_fmF-B2Y_1Z-fauVb9B2EZ5wA3rzY3wkvwrksHL-a1opWCzfQ80vP2HVEA3b-C8NoxLGQnJNG03Ko5WEw0zvS0N4IWwYenMq-ze9w_Q2NIRNGjp9NLEGXvIL8WWdMptekaXqdOROEbxc275jQPZeBVbOMUApla3pqdJmql2hlWkomXGz44yzsdeqi2gXOom55H-oHULCtD_ZTMCDTO9XCcSygeMy1IlzTwZRcSn6KVve0Z-xiIfMuhYcf9SLwxfCo_Kj3cu_ULRVUscLa6qQzsbUVTTsZNiJcvev4Tj7ZJWAFmaGKGKkys2_oYBpqiCKcUw4Q6iaNRsI1iNcnOHvLev1Pdl42Aa0uPxpC_128zrAOH_PcO0RE5tvJ1dG9TGRoPCJbcxxIu3UDwgHEnRL4AnDBVdj8l3ic191_PYa5kqQsiDYTf16pEDNuwlfFoxSWrKZCMymOaGML5ymm9ozy8uAoeHDMwLvxevBtOumQDi4LbdwfqRU1rRLuSzfY_x2v4ytF9A7mpPhsFJnrEwDatFrZ5oTltm0pCoA2L0mURcEbzkT78mYrWoA2vg_QZrE4_8NEwduS2n4GoAf30xHnzLpzow3PvtDCSLXYAbz0vSC05ihaUUVFQaE2pVULLzsqgFeuJXFDD1wWn5dq29ZUGOtxNyqbLsu6Vg2gRLM_qUs5FzPhQ_apa0ouMUIrmC2Pa8tRAQc7uapDuLYGLLWmyjApIEBxlgkI8AqaHdO227EKdSsmQDGsCOO0XABv-fzucfnxEeo2r5mBBObt1jZxUhnbzr26g2Rat9Q6GRJRwh4JaHYUFmPcreyPhhSfYdnWTRcF3qILuWclt4rUkPQmahf18-1j1zuOGkdbAD3ovXie54UhQX5RxcRDCXQqOw_qve4-PCsmjNPjk4tGlJyIFPmaSW0UJTVArpQwi1TaLUWbnaxtjH2V6nPJ1Lkr8pbx0kWdAGhzUB-gB-_F9tNeB0anrj9RN45IOKfuh1Z8ZFtB-P8QUXKq9KEJ-nGNfBqR8KQRmmiU-4EPR7IBSlgXuZptmahkZgBa2u9fJCvdx7SfoRdFYzH23G8nAPcC4irwi4KQMkReb0eX-DMpz1leLLRcRE7nAIXIO2kcjBjmnp9WBWzMTlFSZp8Z56_jnkZpVZy4h1N1gziCW-3Me63aQRydGEdjximOKwxJbhPwVWxRElf4xDYe4xdFSV7dIky8Msmrk5hkKKbMKz-K0KDIdYtH97mkhjDefX7nxp-aT4rYretqfsYfXfPz1BzrbEP2XJLyfzXV_0d4SzdK1k-29ooSoOTE5ak5ji5vkh_IS5MoQifD05HhlV8laWLFECHFvpathoLUVDeuqKR99tJafqFPrdFr2lBRUlHsuyc1McVuKcoP9Ktiho5smfeI7a-OJM_EGKpEP1u5apVC16PCR05tDf3KNH1qNq1tDCbZaOvPsF4iVEapj5HL40EVshthu7xkXffhnvZLygGfgnBuS3xWiRGqvYLLpuGsX8-ume0AtOL6ovJta1eX9bT9Ohyx7hl0Duqc1besV439ISanB-_klhWEf6C65eb7-PYxBFCQeW4g4VJsLc5nzp3B15_gG1JUnbv0Nz4_gM-PF5kYeQVFfXW1qA0XYeQFJUYxuVZk_lCUlvsxBmvFvtBe_0bJgmr9_1J95sxa4BqIy7NmggmP1SoqUuIB_qRp-IGVdowZ3498-IFuXeBE48DZKPknPUjvGXykZuDqIXWnck-9kqJiW0tgw-lWVT9I44iU-ARIMKn6AY7Ca4B0a91MGX4mum_rVCuexCChHCTfV7jDMRahT9IhFsNF96n5JJ8aK3VZkuaY5KoVkwDX-iynL2f7UhC-10y_J4JsbbYfIFjBVrgT7PJmfXOQVAlJB3hEE-sRxujV1j-zhnImpuXNkh6Nim7ujnHF1Pqt0Ea57Y5UMyV1SNBJ7h70uj8TRYV5Kyp5yJYbZUBSpRijk8fjiceTOKeQtEZ23cJJ5cNp0kaqR1LsAF5l2Va0WfHy0hFkmZCqJjw7HFGNOobvg26QNUu9F8XbuuEAJZ3H0yOS761jeqd-a3P_M4Suru3mf4JQ2449Hk7hfoKgQRNyYv_-3dsPKykMfTnsA38D_ncA_tvr_6w0s2tPNBiLOanzkgAUA5T8BvvXgz3C43jy22-Ef7Ll3fuQ37D_fbD3xyqW8Uw7nkzaI5wn-Y1rw02aOpIn-ampS6ebiJwW_-hNRE6Lo_XI-72J-LWbCORPPB7kHp0oejB9NrrGnruNhnnu0ZOGk5OXoCBxDhuqKqnqpTsz0lfeFR1Lld4RRcusMWp0xPRRtqqg77cK4McLJxznHfXgGWfqqTHvCRPd2cfwQAoOnp4XKYSnxkVlAC8dfv2V07Kj7a1g_27pme3vaS3V_qGtqi64j_QlrUjLTVZSTg29POfYdl1G4Pqh9MBJ34vlT7fnpN2aEU4L84FumTZqfx4c3wqAs21ad1b8Ky35BjJXwjMYh2dVBCgcGK4bzsxSlM_dQeZB178l6P4LU-KbFMNnH41iYvuBVheHb3LCSnCAwlPhnZxnBmFSoPmo_6fl7C1WMVokxWCdjabOzOPkojP7hqLYka51WL42HK554kYW5nFysjCeWliml8PlNRb-ElPKdABWMn5jHyYkimFNmLjBa3tcVSSKT7LSyaWDoExfefkCpWXqHRke79scGdLAg1lm52TaEGWygSXfLYIGAxH-1D-hF8KO-W08FHp9HVrmUhnq3icWUlF3Q4ke7rqPb7Pdlfe4THFK7ui9H4c2IoMkvNvdRyFKaBJVKfWiJIpJUiQpqkpaJVGZFqF3x-6Rh0Iv9pGPceKFizBNogQnGBVBkEYUg8CjNWF8Ya1YSLW9c5er7v0gwTG64ySnXN93lzldtLprm3fq3lmdt1sNAo8zbfSJg2GGu39QYFtLEK5hdxvPIhN5l-_lg8iDDdEaft1RAVUrBBPbuRdUUApY7gWpWfFGEfG5v9Or4VdmdpAcL6jVVGuypVcvqt21it__9Utovau-3KP_BAAA__9uRxOx">