VM crashes in ciTypeFlow::get_block_for()

hs20-01 in JDK7 b112 crashed in the compiler code:

#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00002b4c1cfaab00, pid=29009, tid=1109731648
#
# JRE version: 7.0
# Java VM: Java HotSpot(TM) 64-Bit Server VM (20.0-b01 mixed mode linux-amd64 )
# Problematic frame:
# V [libjvm.so+0x34eb00]
#
# If you would like to submit a bug report, please visit:
# http://java.sun.com/webapps/bugreport/crash.jsp
#

Instructions: (pc=0x00002b4c1cfaab00)
0x00002b4c1cfaaaf0: 07 48 8b 00 48 89 75 a8 48 89 45 c0 48 8b 47 40
0x00002b4c1cfaab00: 4c 8b 34 f0 4d 85 f6 0f 84 cd 01 00 00 83 7d b4
;; 00002b4c1cfaaaf0 07 (bad)
;; 00002b4c1cfaaaf1 48 8b 00 mov (%rax),%rax
;; 00002b4c1cfaaaf4 48 89 75 a8 mov %rsi,0xffffffffffffffa8(%rbp)
;; 00002b4c1cfaaaf8 48 89 45 c0 mov %rax,0xffffffffffffffc0(%rbp)
;; 00002b4c1cfaaafc 48 8b 47 40 mov 0x40(%rdi),%rax
;; ---------------
;; 00002b4c1cfaab00 4c 8b 34 f0 mov (%rax,%rsi,8),%r14
;; 00002b4c1cfaab04 4d 85 f6 test %r14,%r14
;; 00002b4c1cfaab07 0f 84 cd 01 00 00 je 0x00002b4c1cfaacda
;; 00002b4c1cfaab0d 83 7d b4 ff cmpl $0xffffffffffffffff,0xffffffffffffffb4(%rbp)
;;
Stack: [0x0000000042152000,0x0000000042253000], sp=0x00000000422502d0, free space=1016k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.so+0x34eb00];; ciTypeFlow::get_block_for(int, ciTypeFlow::JsrSet*, ciTypeFlow::CreateOption)+0x30
V [libjvm.so+0x351157];; ciTypeFlow::flow_types()+0xa7
V [libjvm.so+0x3512c1];; ciTypeFlow::do_flow()+0x11
V [libjvm.so+0x337e3c];; ciMethod::get_flow_analysis()+0x7c
V [libjvm.so+0x316054];; ParseGenerator::can_parse(ciMethod*, int)+0x34
V [libjvm.so+0x316121];; CallGenerator::for_inline(ciMethod*, float)+0x21
V [libjvm.so+0x40fd3f];; Compile::call_generator(ciMethod*, int, bool, JVMState*, bool, float)+0x52f
V [libjvm.so+0x41070c];; Parse::do_call()+0x1cc
V [libjvm.so+0x6af50a];; Parse::do_one_bytecode()+0x225a
V [libjvm.so+0x6a4933];; Parse::do_one_block()+0x283
V [libjvm.so+0x6a4ab0];; Parse::do_all_blocks()+0xf0
V [libjvm.so+0x6a6c1c];; Parse::Parse(JVMState*, ciMethod*, float)+0x14fc
V [libjvm.so+0x316208];; ParseGenerator::generate(JVMState*)+0x88
V [libjvm.so+0x38e735];; Compile::Compile(ciEnv*, C2Compiler*, ciMethod*, int, bool, bool)+0x8d5
V [libjvm.so+0x314efb];; C2Compiler::compile_method(ciEnv*, ciMethod*, int)+0xdb
V [libjvm.so+0x393914];; CompileBroker::invoke_compiler_on_method(CompileTask*)+0x294
V [libjvm.so+0x3940fd];; CompileBroker::compiler_thread_loop()+0x38d
V [libjvm.so+0x78c6cd];; JavaThread::thread_main_inner()+0x6d
V [libjvm.so+0x687dc0];; _ZL10java_startP6Thread+0xf0


Current CompileTask:
C2: 3296 1% <...>.Test.runThread()Z @ 4 (1179 bytes)

Please see comments for details.