https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65002
--- Comment #5 from Jakub Jelinek <jakub at gcc dot gnu.org> --- Seems estimate_function_body_sizes, in particular the ipa_load_from_parm_agg, assumes that the function has SSA form properly updated, but since the bounded pointers stuff changes that is not necessarily true. Normally that is fixed up now during fixup_cfg pass, but this call happens before that. Perhaps we need to update ssa form for the function if it hasn't been updated yet before we call these?