I would appreciate some credit in the PR, I took quite a while to extract a nice "X.jasm" from a larger set of classfiles, and reducing it to just a few lines of code.

Affected seem to be current (JDK24) - JDK17. JDK11 did not reproduce. [~thartmann] said it is a regression of JDK-8252372.

emanuel@emanuel-oracle:/oracle-work/triage/new$ java -jar ~/Documents/asmtools-7.0-build/release/lib/asmtools.jar jasm X.jasm

emanuel@emanuel-oracle:/oracle-work/triage/new$ /oracle-work/jdk-fork4/build/linux-x64-debug/jdk/bin/java -XX:CompileCommand=printcompilation,X::* -XX:CompileCommand=compileonly,X::test -Xcomp X


CompileCommand: PrintCompilation X.* bool PrintCompilation = true
CompileCommand: compileonly X.test bool compileonly = true
586 26 b 3 X::test (40 bytes)
587 27 b 4 X::test (40 bytes)
#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/oracle-work/jdk-fork4/open/src/hotspot/share/opto/loopopts.cpp:1071), pid=2960708, tid=2960722
# assert(!n_loop->is_member(get_loop(lca))) failed: control must not be back in the loop
#
# JRE version: Java(TM) SE Runtime Environment (24.0) (fastdebug build 24-internal-2024-07-23-0635220.emanuel...)
# Java VM: Java HotSpot(TM) 64-Bit Server VM (fastdebug 24-internal-2024-07-23-0635220.emanuel..., compiled mode, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)
# Problematic frame:
# V [libjvm.so+0x12a70b9] PhaseIdealLoop::try_move_store_after_loop(Node*) [clone .part.0]+0x9e9
#
# Core dump will be written. Default location: Core dumps may be processed with "/usr/share/apport/apport -p%p -s%s -c%c -d%d -P%P -u%u -g%g -- %E" (or dumping to /oracle-work/triage/new/core.2960708)
#
# An error report file with more information is saved as:
# /oracle-work/triage/new/hs_err_pid2960708.log
#
# Compiler replay data is saved as:
# /oracle-work/triage/new/replay_pid2960708.log
#
# If you would like to submit a bug report, please visit:
# https://bugreport.java.com/bugreport/crash.jsp
#
Aborted (core dumped)


Current CompileTask:
C2:616 27 b 4 X::test (40 bytes)

Stack: [0x00007fb2c5537000,0x00007fb2c5638000], sp=0x00007fb2c5632cb0, free space=1007k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.so+0x12a70b9] PhaseIdealLoop::try_move_store_after_loop(Node*) [clone .part.0]+0x9e9 (loopopts.cpp:1071)
V [libjvm.so+0x12aadd6] PhaseIdealLoop::split_if_with_blocks(VectorSet&, Node_Stack&)+0x96 (loopopts.cpp:1964)
V [libjvm.so+0x129d429] PhaseIdealLoop::build_and_optimize()+0xee9 (loopnode.cpp:4815)
V [libjvm.so+0x9e90c0] PhaseIdealLoop::optimize(PhaseIterGVN&, LoopOptsMode)+0x390 (loopnode.hpp:1117)
V [libjvm.so+0x9e1da5] Compile::optimize_loops(PhaseIterGVN&, LoopOptsMode)+0x75 (compile.cpp:2171)
V [libjvm.so+0x9e4531] Compile::Optimize()+0xe21 (compile.cpp:2418)
V [libjvm.so+0x9e7c76] Compile::Compile(ciEnv*, ciMethod*, int, Options, DirectiveSet*)+0x1b06 (compile.cpp:852)
V [libjvm.so+0x835885] C2Compiler::compile_method(ciEnv*, ciMethod*, int, bool, DirectiveSet*)+0x1d5 (c2compiler.cpp:142)
V [libjvm.so+0x9f38b8] CompileBroker::invoke_compiler_on_method(CompileTask*)+0x928 (compileBroker.cpp:2303)
V [libjvm.so+0x9f4548] CompileBroker::compiler_thread_loop()+0x478 (compileBroker.cpp:1961)
V [libjvm.so+0xe9cffc] JavaThread::thread_main_inner()+0xcc (javaThread.cpp:757)
V [libjvm.so+0x17bd736] Thread::call_run()+0xb6 (thread.cpp:225)
V [libjvm.so+0x14a55b7] thread_native_entry(Thread*)+0x127 (os_linux.cpp:858)


A quick investigation with RR:

(rr) p n->dump_bfs(10,0,"c#")
dist dump
---------------------------------------------
  10 67 ParsePredicate === 66 20 [[ 68 76 ]] #Profiled_Loop #useless !jvms: X::test @ bci:0
   9 76 IfTrue === 67 [[ 77 ]] #1 !jvms: X::test @ bci:0
   8 77 ParsePredicate === 76 20 [[ 78 86 ]] #Loop_Limit_Check #useless !jvms: X::test @ bci:0
   7 314 IfFalse === 351 [[ 244 ]] #0 !orig=[144] !jvms: X::test @ bci:5
   7 86 IfTrue === 77 [[ 244 ]] #1 !jvms: X::test @ bci:0
   6 370 IfFalse === 349 [[ 355 356 ]] #0 !orig=[350],314,[144] !jvms: X::test @ bci:5
   6 244 Loop === 244 86 314 [[ 244 239 240 287 376 ]] !orig=[87] !jvms: X::test @ bci:0
   5 355 SafePoint === 370 1 290 1 1 356 1 346 1 [[ 351 ]] SafePoint !orig=310,220 !jvms: X::test @ bci:37
   5 376 NeverBranch === 244 [[ 377 378 ]]
   4 351 OuterStripMinedLoopEnd === 355 92 [[ 352 314 ]] P=0.900000, C=-1.000000
   4 377 CProj === 376 [[ 298 ]] #0
   3 349 CountedLoopEnd === 363 348 [[ 370 143 ]] [lt] P=0.900000, C=-1.000000 !orig=[142] !jvms: X::test @ bci:5
   3 352 IfTrue === 351 [[ 353 ]] #1
   3 298 SafePoint === 377 1 296 1 1 287 1 92 1 92 133 [[ 293 353 ]] SafePoint !orig=134 !jvms: X::test @ bci:5
   2 143 IfTrue === 349 [[ 363 ]] #1 !jvms: X::test @ bci:5
   2 353 OuterStripMinedLoop === 353 298 352 [[ 353 363 ]]
   1 363 CountedLoop === 363 353 143 [[ 360 362 363 364 365 361 349 381 ]] stride: 2 strip mined !orig=[354],[311],[283] !jvms: X::test @ bci:16
   0 360 StoreC === 363 364 149 206 [[ 290 239 ]] @java/lang/Class (java/io/Serializable,java/lang/constant/Constable,java/lang/reflect/AnnotatedElement,java/lang/invoke/TypeDescriptor,java/lang/reflect/GenericDeclaration,java/lang/reflect/Type,java/lang/invoke/TypeDescriptor$OfField):exact+120 *, name=c, idx=4; Memory: @java/lang/Class (java/io/Serializable,java/lang/constant/Constable,java/lang/reflect/AnnotatedElement,java/lang/invoke/TypeDescriptor,java/lang/reflect/GenericDeclaration,java/lang/reflect/Type,java/lang/invoke/TypeDescriptor$OfField):exact+120 *, name=c, idx=4; !orig=[295],271,[211] !jvms: X::test @ bci:25


(rr) p lca->dump()
 363 CountedLoop === 363 353 143 [[ 360 362 363 364 365 361 349 381 ]] stride: 2 strip mined !orig=[354],[311],[283] !jvms: X::test @ bci:16
$8 = void
(rr) p n_loop->dump()
Loop: N363/N143 counted [0,10),+2 (2147483648 iters) strip_mined

-> looks like another infinite-loop bug.