I see the following crash:

Default case invoked for:
   opcode = 274, "PopulateIndex"
o3504 PopulateIndex === _ o3305 o180 [[o3505 o3509 o3513 354 ]] #vectorx[4]:{int}

--N: o3504 PopulateIndex === _ o3305 o180 [[o3505 o3509 o3513 354 ]] #vectorx[4]:{int}

   --N: o3305 Phi === o3301 o3813 o2894 [[o3234 o3238 o3242 o3246 o3300 o3288 o3504 o3121 o2894 248 ]] #int:>=24:www #tripcount
   RREGI 0 RREGI
   RAX_REGI 0 RAX_REGI
   RBX_REGI 0 RBX_REGI
   RCX_REGI 0 RCX_REGI
   RDX_REGI 0 RDX_REGI
   RDI_REGI 0 RDI_REGI
   NO_RAX_RDX_REGI 0 NO_RAX_RDX_REGI
   NO_RBP_R13_REGI 0 NO_RBP_R13_REGI
   STACKSLOTI 100 storeSSI

   --N: o180 ConI === o0 [[o3779 o1522 o3785 o3360 o2905 o2905 o2166 o1900 o3843 o3856 o2836 o1707 o3504 o1844 o3775 o3827 o2479 o3781 o3777 o2807 o1472 o1652 o3783 217 217 ]] #int:1
   IMMI 10 IMMI
   IMMI_1 0 IMMI_1
   IMMI2 0 IMMI2
   IMMU7 5 IMMU7
   IMMI8 5 IMMI8
   IMMU8 5 IMMU8
   IMMI16 10 IMMI16
   IMMU31 0 IMMU31
   IMMI_POW2M1 20 IMMI_POW2M1
   RREGI 100 loadConI
   RAX_REGI 100 loadConI
   RBX_REGI 100 loadConI
   RCX_REGI 100 loadConI
   RDX_REGI 100 loadConI
   RDI_REGI 100 loadConI
   NO_RAX_RDX_REGI 100 loadConI
   NO_RBP_R13_REGI 100 loadConI
   STACKSLOTI 200 storeSSI

# To suppress the following error report, specify this argument
# after -XX: or in .hotspotrc: SuppressErrorAt=/matcher.cpp:1716
#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/home/roland/jdk-jdk/src/hotspot/share/opto/matcher.cpp:1716), pid=142402, tid=142421
# assert(false) failed: bad AD file
#
# JRE version: OpenJDK Runtime Environment (19.0) (fastdebug build 19-internal-adhoc.roland.jdk-jdk)
# Java VM: OpenJDK 64-Bit Server VM (fastdebug 19-internal-adhoc.roland.jdk-jdk, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)
# Problematic frame:
# V [libjvm.so+0x14f9a8a] Matcher::Label_Root(Node const*, State*, Node*, Node*&)+0x50a
#
# Core dump will be written. Default location: Core dumps may be processed with "/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h" (or dumping to /mnt/old/roland/tmp/tmp/core.142402)
#
# An error report file with more information is saved as:
# /mnt/old/roland/tmp/tmp/hs_err_pid142402.log

With the attached test case ran this way:
$ javac Test.java FuzzerUtils.java
$ java Test