The fuzzer pass doesn't handle OpPhi instructions in livesafe functions when we add a branch from the loop's back-edge block to its merge block.