Crash while jitting System.Runtime.Intrinsics tests in `Rationalizer::RewriteHWIntrinsicAsUserCall`

[jakobbotsch]

Example run: https://dev.azure.com/dnceng-public/public/_build/results?buildId=690710&view=results
Example console log: https://helixre107v0xdcypoyl9e7f.blob.core.windows.net/dotnet-runtime-refs-heads-main-0672afe302df444cb8/System.Runtime.Intrinsics.Tests/1/console.a34f21a2.log?helixlogtype=result

C:\h\w\AC62094B\w\AD3D093F\e>"C:\h\w\AC62094B\p\dotnet.exe" exec --runtimeconfig System.Runtime.Intrinsics.Tests.runtimeconfig.json --depsfile System.Runtime.Intrinsics.Tests.deps.json xunit.console.dll System.Runtime.Intrinsics.Tests.dll -xml testResults.xml -nologo -nocolor -notrait category=IgnoreForCI -notrait category=OuterLoop -notrait category=failing  
  Discovering: System.Runtime.Intrinsics.Tests (method display = ClassAndMethod, method display options = None)
  Discovered:  System.Runtime.Intrinsics.Tests (found 1204 test cases)
  Starting:    System.Runtime.Intrinsics.Tests (parallel test collections = on [4 threads], stop on fail = off)
Fatal error. 0xC0000005
   at System.Runtime.Intrinsics.Tests.Vectors.Vector256Tests.Vector256ByteShuffleOneInputWithLocalIndicesTest()
...
# 12  Id: bb0.dec Suspend: 0 Teb: 0265c000 Unfrozen
ChildEBP RetAddr  
0c22a2a8 729fd5b0 coreclr!EEPolicy::HandleFatalError+0x84
0c22a4c0 729fcb5e coreclr!CPFH_RealFirstPassHandler+0x9de
0c22a598 72a0019f coreclr!CPFH_FirstPassHandler+0x198
0c22a60c 77e333d2 coreclr!COMPlusFrameHandler+0x21f
WARNING: Stack unwind information not available. Following frames may be wrong.
0c22a630 77e333a4 ntdll!RtlConvertUlongToLargeInteger+0xa2
0c22a6f8 77e20eff ntdll!RtlConvertUlongToLargeInteger+0x74
*** WARNING: Unable to verify checksum for clrjit.dll
0c22b200 71007bdd ntdll!KiUserExceptionDispatcher+0xf
0c22b224 71007bab clrjit!Rationalizer::RewriteHWIntrinsicAsUserCall+0x2a
0c22b23c 71008636 clrjit!Rationalizer::RationalizeVisitor::PreOrderVisit+0x5c
0c22b260 71008851 clrjit!GenTreeVisitor<Rationalizer::RationalizeVisitor>::WalkTree+0x3d

cc @dotnet/jit-contrib @tannergooding can you PTAL?

[dotnet-policy-service]

Tagging subscribers to this area: @JulieLeeMSFT, @jakobbotsch
See info in area-owners.md if you want to be subscribed.