Created attachment 28610 [details]
reduced testcase

Compiler output:
$ gcc -O --param loop-invariant-max-bbs-in-loop=0 testcase.ctestcase.c: In function 'f1':
testcase.c:18:1: error: unrecognizable insn:
 }
 ^
(insn 53 50 24 5 (set (reg:SI 5 di [77])
        (plus:SI (subreg:SI (reg:HI 7 sp) 0)
            (const_int -248 [0xffffffffffffff08]))) testcase.c:13 -1
     (nil))
testcase.c:18:1: internal compiler error: in extract_insn, at recog.c:2140
0x9969ea _fatal_insn(char const*, rtx_def const*, char const*, int, char const*)
        /mnt/svn/gcc-trunk/gcc/rtl-error.c:110
0x996a7a _fatal_insn_not_found(rtx_def const*, char const*, int, char const*)
        /mnt/svn/gcc-trunk/gcc/rtl-error.c:118
0x9524d8 extract_insn(rtx_def*)
        /mnt/svn/gcc-trunk/gcc/recog.c:2140
0x9526eb extract_insn_cached(rtx_def*)
        /mnt/svn/gcc-trunk/gcc/recog.c:2043
0x79f91d cleanup_subreg_operands(rtx_def*)
        /mnt/svn/gcc-trunk/gcc/final.c:2968
0x94dc60 split_insn
        /mnt/svn/gcc-trunk/gcc/recog.c:2857
0x956401 split_all_insns()
        /mnt/svn/gcc-trunk/gcc/recog.c:2911
0x956558 rest_of_handle_split_after_reload
        /mnt/svn/gcc-trunk/gcc/recog.c:3795
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.

Tested revisions:
r193125 - crash
r192654 - OK
r191586 - OK
4.7 r191640 - OK