JVM crash in compile mode but not in mixed mode and interpreted mode

ADDITIONAL SYSTEM INFORMATION :
OS version:
Distributor ID: Ubuntu
Description: Ubuntu 20.04.2 LTS
Release: 20.04
Codename: focal


JDK version:

openjdk version "19-internal" 2022-09-20
OpenJDK Runtime Environment (fastdebug build 19-internal-adhoc.root.jdk-master)
OpenJDK 64-Bit Server VM (fastdebug build 19-internal-adhoc.root.jdk-master, mixed mode)

This JDK is built on the source code from https://github.com/openjdk/jdk , master branch.

A DESCRIPTION OF THE PROBLEM :
When we run the test in jdk19(built from https://github.com/openjdk/jdk, master branch), in compiled mode(with "-Xcomp"), it crashed with the following message. But when run the test in mixed mode or interpreted mode(with "-Xint), it passed successfully.

The error message in compiled mode:

# To suppress the following error report, specify this argument
# after -XX: or in .hotspotrc: SuppressErrorAt=/cfgnode.cpp:2497
#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/root/jit/jdk-master/src/hotspot/share/opto/cfgnode.cpp:2497), pid=68680, tid=68693
# assert(cached_vbox != __null) failed: sanity
#
# JRE version: OpenJDK Runtime Environment (19.0) (fastdebug build 19-internal-adhoc.root.jdk-master)
# Java VM: OpenJDK 64-Bit Server VM (fastdebug 19-internal-adhoc.root.jdk-master, compiled mode, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)
# Problematic frame:
# V [libjvm.so+0x9c1db0] PhiNode::merge_through_phi(Node*, PhaseIterGVN*)+0xc70
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# /root/jit/fuzzJIT/bug_merge/bug_init/hs_err_pid68680.log
#
# Compiler replay data is saved as:
# /root/jit/fuzzJIT/bug_merge/bug_init/replay_pid68680.log
#
# If you would like to submit a bug report, please visit:
# https://bugreport.java.com/bugreport/crash.jsp

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
1. download bug_merge.zip from
2. extract the bug_merge.zip
3. in dictionary "bug_merge", run command:
java -cp ./bugFiles:./util:./junit.jar:./hamcrest.jar:./target/classes:./target/test-classes org.junit.runner.JUnitCore com.alibaba.fastjson.deserializer.issue1463.TestIssue1463


ACTUAL -
When run in compiled mode(with "-Xcomp"), it crashed. But when run in mixed mode or interpreted mode(with -Xint), it passed successfully.

CUSTOMER SUBMITTED WORKAROUND :
run the command without -Xcomp or with -Xint

FREQUENCY : always