Subject: bug#55068: 29.0.50; crashes when trying to set default font

From: Gregor Zattler <[email-masked]>
Date: Sun, 24 Apr 2022 23:34:40 +0200

Hi Po,
* Po Lu <[email-masked]> [24. Apr. 2022]:
> Gregor Zattler <[email-masked]> writes:
>> I read this file and tried to follow it.  At the end of the
>> bug report there is info on how this instance of Emacs was
>> configured for building.  Isn't
>>
>> Configured using:
>>  'configure -C --prefix=/usr/local/stow/emacs-snapshot
>> [...]
>>  --enable-checking=yes,glyphs --enable-check-lisp-object-type
>>  --with-native-compilation 'CFLAGS=-g3 -O0
>> [...]
>>
>> the right result?  Should I disable native compilation?
> 
> That should work, yes, thanks.

OK, I disabled native compilation and configured again to
this result:

Configured for 'x86_64-pc-linux-gnu'.

Where should the build process find the source code?    .
What compiler should emacs be built with?               gcc -g3 -O0  -ffile-prefix-map=/home/grfz/src/emacs=. -fstack-protector-strong -Wformat -Werror=format-security
Should Emacs use the GNU version of malloc?             no
(The GNU allocators don't work with this system configuration.)
Should Emacs use a relocating allocator for buffers?    no
Should Emacs use mmap(2) for buffer allocation?         no
What window system should Emacs use?                    x11
What toolkit should Emacs use?                          LUCID
Where do we find X Windows header files?                Standard dirs
Where do we find X Windows libraries?                   Standard dirs
Does Emacs use -lXaw3d?                                 yes
Does Emacs use -lXpm?                                   yes
Does Emacs use -ljpeg?                                  yes
Does Emacs use -ltiff?                                  yes
Does Emacs use a gif library?                           yes -lgif
Does Emacs use a png library?                           yes -lpng16 -lz
Does Emacs use -lrsvg-2?                                yes
Does Emacs use -lwebp?                                  no
Does Emacs use -lsqlite3?                               no
Does Emacs use cairo?                                   yes
Does Emacs use -llcms2?                                 yes
Does Emacs use imagemagick?                             no
Does Emacs use native APIs for images?                  no
Does Emacs support sound?                               yes
Does Emacs use -lgpm?                                   yes
Does Emacs use -ldbus?                                  yes
Does Emacs use -lgconf?                                 no
Does Emacs use GSettings?                               yes
Does Emacs use a file notification library?             yes -lglibc (inotify)
Does Emacs use access control lists?                    yes -lacl
Does Emacs use -lselinux?                               yes
Does Emacs use -lgnutls?                                yes
Does Emacs use -lxml2?                                  yes
Does Emacs use -lfreetype?                              yes
Does Emacs use HarfBuzz?                                yes
Does Emacs use -lm17n-flt?                              yes
Does Emacs use -lotf?                                   yes
Does Emacs use -lxft?                                   no
Does Emacs use -lsystemd?                               yes
Does Emacs use -ljansson?                               yes
Does Emacs use the GMP library?                         yes
Does Emacs directly use zlib?                           yes
Does Emacs have dynamic modules support?                yes
Does Emacs use toolkit scroll bars?                     no
Does Emacs support Xwidgets?                            no
Does Emacs have threading support in lisp?              yes
Does Emacs support the portable dumper?                 yes
Does Emacs support legacy unexec dumping?               no
Which dumping strategy does Emacs use?                  pdumper
Does Emacs have native lisp compiler?                   no
Does Emacs use version 2 of the the X Input Extension?  no

Then I did

time nice ionice -c 3 eatmydata make -j 3

And this is the result of the gdb session:

0 (master=) grfz@no:~/src/emacs/src$ gdb ./emacs
GNU gdb (Debian 10.1-1.7) 10.1.90.20210103-git
Copyright (C) 2021 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from ./emacs...
SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
DISPLAY = :0
TERM = screen-256color-bce-s
Breakpoint 1 at 0x1fac58: file emacs.c, line 420.
Breakpoint 2 at 0x1be307: file xterm.c, line 20068.
(gdb) run -Q
Starting program: /home/grfz/src/emacs/src/emacs -Q
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff19ee700 (LWP 389772)]
[New Thread 0x7ffff11dc700 (LWP 389773)]
[New Thread 0x7ffff09db700 (LWP 389774)]

Thread 1 "emacs" received signal SIGSEGV, Segmentation fault.
x_menu_show (f=0x5555561ba540, x=355, y=445, menuflags=0, title=XIL(0x7ffff254286c), error_name=0x7fffffffbfd8) at xmenu.c:1847
1847      specpdl_ref specpdl_count = SPECPDL_INDEX ();
(gdb) bt full
#0  x_menu_show (f=0x5555561ba540, x=355, y=445, menuflags=0, title=XIL(0x7ffff254286c), error_name=0x7fffffffbfd8) at xmenu.c:1847
        i = 21845
        wv = 0x0
        save_wv = 0x0
        first_wv = 0x0
        prev_wv = 0x0
        submenu_stack = 0x7fffff901ae0
        subprefix_stack = 0x7fffff207730
        submenu_depth = 0
        specpdl_count = {
          bytes = 1
        }
        first_pane = 85
#1  0x000055555564f57b in x_popup_menu_1 (position=XIL(0x555555faf143), menu=XIL(0x5555562fe2e3)) at menu.c:1402
        keymap = XIL(0)
        tem = XIL(0)
        tem2 = XIL(0)
        xpos = 355
        ypos = 445
        title = XIL(0x7ffff254286c)
        error_name = 0x0
        selection = XIL(0)
        f = 0x5555561ba540
        x = make_fixnum(355)
        y = make_fixnum(445)
        window = XIL(0x5555561ba545)
        menuflags = 0
        specpdl_count = {
          bytes = 384
        }
#2  0x000055555564f60e in Fx_popup_menu (position=XIL(0x555555faf143), menu=XIL(0x5555562fe2e3)) at menu.c:1466
#3  0x0000555555847c27 in funcall_subr (subr=0x555555e55ca0 <Sx_popup_menu>, numargs=2, args=0x7ffff1a1c110) at eval.c:2913
        argbuf = {XIL(0x7ffff1a1c180), XIL(0x160), XIL(0x7fffffffc100), XIL(0x11558a9f41), XIL(0x555555e55ca5), XIL(0x7fffffffc120), XIL(0x5555558a9ba5), XIL(0x555555e55ca5)}
        a = 0x7ffff1a1c110
        fun = XIL(0)
#4  0x00005555558ab4fb in exec_byte_code (fun=XIL(0x7ffff22a4a35), args_template=513, nargs=1, args=0x7ffff1a1c218) at bytecode.c:809
        call_nargs = 2
        call_fun = XIL(0x555555e55ca5)
        count1 = {
          bytes = 352
        }
        template = make_fixnum(513)
        val = XIL(0x555558b20eb4)
        call_args = 0x7ffff1a1c110
        original_fun = XIL(0x2aaa9c32c180)
        bytecode = XIL(0x7ffff22a4ad4)
        op = 2
        type = CATCHER
        targets =
          {0x5555558afa8f <exec_byte_code+22044>, 0x5555558afabd <exec_byte_code+22090>, 0x5555558afabf <exec_byte_code+22092>, 0x5555558afac1 <exec_byte_code+22094>, 0x5555558afac3 <exec_byte_code+22096>, 0x5555558afac3 <exec_byte_code+22096>, 0x5555558afb40 <exec_byte_code+22221>, 0x5555558afbcf <exec_byte_code+22364>, 0x5555558aaa05 <exec_byte_code+1426>, 0x5555558aaa07 <exec_byte_code+1428>, 0x5555558aaa09 <exec_byte_code+1430>, 0x5555558aaa0b <exec_byte_code+1432>, 0x5555558aaa0d <exec_byte_code+1434>, 0x5555558aaa0d <exec_byte_code+1434>, 0x5555558aaa16 <exec_byte_code+1443>, 0x5555558aa9c2 <exec_byte_code+1359>, 0x5555558aaf11 <exec_byte_code+2718>, 0x5555558aaf13 <exec_byte_code+2720>, 0x5555558aaf15 <exec_byte_code+2722>, 0x5555558aaf17 <exec_byte_code+2724>, 0x5555558aaf19 <exec_byte_code+2726>, 0x5555558aaf19 <exec_byte_code+2726>, 0x5555558aaf63 <exec_byte_code+2800>, 0x5555558aaf22 <exec_byte_code+2735>, 0x5555558ab1bb <exec_byte_code+3400>, 0x5555558ab1bd <exec_byte_code+3402>, 0x5555558ab1bf <exec_byte_code+3404>, 0x5555558ab1c1 <exec_byte_code+3406>, 0x5555558ab1c3 <exec_byte_code+3408>, 0x5555558ab1c3 <exec_byte_code+3408>, 0x5555558ab15a <exec_byte_code+3303>, 0x5555558ab17a <exec_byte_code+3335>, 0x5555558ab2a1 <exec_byte_code+3630>, 0x5555558ab2a3 <exec_byte_code+3632>, 0x5555558ab2a5 <exec_byte_code+3634>, 0x5555558ab2a7 <exec_byte_code+3636>, 0x5555558ab2a9 <exec_byte_code+3638>, 0x5555558ab2a9 <exec_byte_code+3638>, 0x5555558ab240 <exec_byte_code+3533>, 0x5555558ab260 <exec_byte_code+3565>, 0x5555558ab653 <exec_byte_code+4576>, 0x5555558ab655 <exec_byte_code+4578>, 0x5555558ab657 <exec_byte_code+4580>, 0x5555558ab659 <exec_byte_code+4582>, 0x5555558ab65b <exec_byte_code+4584>, 0x5555558ab65b <exec_byte_code+4584>, 0x5555558ab5f2 <exec_byte_code+4479>, 0x5555558ab612 <exec_byte_code+4511>, 0x5555558ac032 <exec_byte_code+7103>, 0x5555558abe52 <exec_byte_code+6623>, 0x5555558abe46 <exec_byte_code+6611>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558ac2d7 <exec_byte_code+7780>, 0x5555558ac42c <exec_byte_code+8121>, 0x5555558ac4ad <exec_byte_code+8250>, 0x5555558ac52f <exec_byte_code+8380>, 0x5555558ac5b0 <exec_byte_code+8509>, 0x5555558aad08 <exec_byte_code+2197>, 0x5555558aadaf <exec_byte_code+2364>, 0x5555558ac64e <exec_byte_code+8667>, 0x5555558aac27 <exec_byte_code+1972>, 0x5555558aae2f <exec_byte_code+2492>, 0x5555558ac6d8 <exec_byte_code+8805>, 0x5555558ac758 <exec_byte_code+8933>, 0x5555558ac7b2 <exec_byte_code+9023>, 0x5555558ac832 <exec_byte_code+9151>, 0x5555558ac8b0 <exec_byte_code+9277>, 0x5555558ac9db <exec_byte_code+9576>, 0x5555558aca35 <exec_byte_code+9666>, 0x5555558acb8b <exec_byte_code+10008>, 0x5555558acd0f <exec_byte_code+10396>, 0x5555558acd69 <exec_byte_code+10486>, 0x5555558acdc3 <exec_byte_code+10576>, 0x5555558ace43 <exec_byte_code+10704>, 0x5555558acec3 <exec_byte_code+10832>, 0x5555558acf43 <exec_byte_code+10960>, 0x5555558acfe6 <exec_byte_code+11123>, 0x5555558ad04d <exec_byte_code+11226>, 0x5555558ad0b4 <exec_byte_code+11329>, 0x5555558ad1ba <exec_byte_code+11591>, 0x5555558ad2c6 <exec_byte_code+11859>, 0x5555558ad3d2 <exec_byte_code+12127>, 0x5555558ad4d2 <exec_byte_code+12383>, 0x5555558ad5e2 <exec_byte_code+12655>, 0x5555558ad6f2 <exec_byte_code+12927>, 0x5555558ad802 <exec_byte_code+13199>, 0x5555558ad912 <exec_byte_code+13471>, 0x5555558ada9a <exec_byte_code+13863>, 0x5555558adbaa <exec_byte_code+14135>, 0x5555558add3b <exec_byte_code+14536>, 0x5555558ade22 <exec_byte_code+14767>, 0x5555558adf09 <exec_byte_code+14998>, 0x5555558ae3fa <exec_byte_code+16263>, 0x5555558abc81 <exec_byte_code+6158>, 0x5555558ae46a <exec_byte_code+16375>, 0x5555558ae4c4 <exec_byte_code+16465>, 0x5555558ae5c2 <exec_byte_code+16719>, 0x5555558ae632 <exec_byte_code+16831>, 0x5555558ae6a2 <exec_byte_code+16943>, 0x5555558ae6fc <exec_byte_code+17033>, 0x5555558ae754 <exec_byte_code+17121>, 0x5555558ae7ac <exec_byte_code+17209>, 0x5555558ae80c <exec_byte_code+17305>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558ae876 <exec_byte_code+17411>, 0x5555558ae8ce <exec_byte_code+17499>, 0x5555558ae926 <exec_byte_code+17587>, 0x5555558ae97e <exec_byte_code+17675>, 0x5555558ae9d6 <exec_byte_code+17763>, 0x5555558aea2e <exec_byte_code+17851>, 0x5555558abc81 <exec_byte_code+6158>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558aea88 <exec_byte_code+17941>, 0x5555558aeaef <exec_byte_code+18044>, 0x5555558aeb49 <exec_byte_code+18134>, 0x5555558aeba3 <exec_byte_code+18224>, 0x5555558aec23 <exec_byte_code+18352>, 0x5555558aeca3 <exec_byte_code+18480>, 0x5555558aecfd <exec_byte_code+18570>, 0x5555558aed57 <exec_byte_code+18660>, 0x5555558aedd7 <exec_byte_code+18788>, 0x5555558aee57 <exec_byte_code+18916>, 0x5555558aeed7 <exec_byte_code+19044>, 0x5555558aef2f <exec_byte_code+19132>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558abb98 <exec_byte_code+5925>, 0x5555558ab6d3 <exec_byte_code+4704>, 0x5555558aab71 <exec_byte_code+1790>, 0x5555558ab7b1 <exec_byte_code+4926>, 0x5555558ab859 <exec_byte_code+5094>, 0x5555558ab8fe <exec_byte_code+5259>, 0x5555558ab9a3 <exec_byte_code+5424>, 0x5555558abb52 <exec_byte_code+5855>, 0x5555558ab0f2 <exec_byte_code+3199>, 0x5555558abc3e <exec_byte_code+6091>, 0x5555558abcc4 <exec_byte_code+6225>, 0x5555558abd67 <exec_byte_code+6388>, 0x5555558abdbc <exec_byte_code+6473>, 0x5555558ac08a <exec_byte_code+7191>, 0x5555558ac119 <exec_byte_code+7334>, 0x5555558ac1bc <exec_byte_code+7497>, 0x5555558ac231 <exec_byte_code+7614>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558aef89 <exec_byte_code+19222>, 0x5555558af02c <exec_byte_code+19385>, 0x5555558af086 <exec_byte_code+19475>, 0x5555558af0e0 <exec_byte_code+19565>, 0x5555558af13a <exec_byte_code+19655>, 0x5555558af194 <exec_byte_code+19745>, 0x5555558af214 <exec_byte_code+19873>, 0x5555558af294 <exec_byte_code+20001>, 0x5555558af314 <exec_byte_code+20129>, 0x5555558af394 <exec_byte_code+20257>, 0x5555558af4fe <exec_byte_code+20619>, 0x5555558af57e <exec_byte_code+20747>, 0x5555558af5fe <exec_byte_code+20875>, 0x5555558af658 <exec_byte_code+20965>, 0x5555558af765 <exec_byte_code+21234>, 0x5555558af872 <exec_byte_code+21503>, 0x5555558af8cc <exec_byte_code+21593>, 0x5555558af926 <exec_byte_code+21683>, 0x5555558ae0c3 <exec_byte_code+15440>, 0x5555558ae283 <exec_byte_code+15888>, 0x5555558af98d <exec_byte_code+21786>, 0x5555558afa0e <exec_byte_code+21915>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558ac93c <exec_byte_code+9417>, 0x5555558ad11b <exec_byte_code+11432>, 0x5555558ae523 <exec_byte_code+16560>, 0x5555558afc85 <exec_byte_code+22546>, 0x5555558afd15 <exec_byte_code+22690>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afdce <exec_byte_code+22875>, 0x5555558afe7f <exec_byte_code+23052>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afff2 <exec_byte_code+23423> <repeats 64 times>}
        quitcounter = 235 '\353'
        bc = 0x555555e524b0 <main_thread+496>
        top = 0x7ffff1a1c108
        pc = 0x7ffff29cb894 "@\207\207"
        bytestr = XIL(0x7ffff22a4ad4)
        vector = XIL(0x7ffff22a4a75)
        maxdepth = make_fixnum(10)
        const_length = 7
        bytestr_length = 29
        vectorp = 0x7ffff25aa590
        max_stack = 10
        frame_base = 0x7ffff1a1c240
        fp = 0x7ffff1a1c290
        bytestr_data = 0x7ffff29cb85d "\302 \204\t"
        rest = false
        mandatory = 1
        nonrest = 2
        pushedargs = 1
        result = XIL(0x70)
#5  0x0000555555847fb6 in fetch_and_exec_byte_code (fun=XIL(0x7ffff25aa495), args_template=0, nargs=0, args=0x7fffffffcab0) at eval.c:2960
#6  0x0000555555848445 in funcall_lambda (fun=XIL(0x7ffff25aa495), nargs=0, arg_vector=0x7fffffffcab0) at eval.c:3032
        val = XIL(0x2aaa9c6b88e0)
        syms_left = make_fixnum(0)
        next = XIL(0x55555583d835)
        lexenv = XIL(0x7fffffffc690)
        count = {
          bytes = 320
        }
        i = 120030143456
        optional = false
        rest = false
        previous_rest = false
#7  0x0000555555847727 in funcall_general (fun=XIL(0x7ffff25aa495), numargs=0, args=0x7fffffffcab0) at eval.c:2823
        original_fun = XIL(0x2aaa9c6b88e0)
#8  0x00005555558479b2 in Ffuncall (nargs=1, args=0x7fffffffcaa8) at eval.c:2873
        count = {
          bytes = 288
        }
        val = XIL(0x555555839d29)
#9  0x000055555583aa55 in Ffuncall_interactively (nargs=1, args=0x7fffffffcaa8) at callint.c:260
        speccount = {
          bytes = 256
        }
#10 0x0000555555847e2e in funcall_subr (subr=0x555555e62860 <Sfuncall_interactively>, numargs=1, args=0x7fffffffcaa8) at eval.c:2938
        fun = XIL(0x555555ef1b00)
#11 0x00005555558476db in funcall_general (fun=XIL(0x555555e62865), numargs=1, args=0x7fffffffcaa8) at eval.c:2819
        original_fun = XIL(0x7b60)
#12 0x00005555558479b2 in Ffuncall (nargs=2, args=0x7fffffffcaa0) at eval.c:2873
        count = {
          bytes = 224
        }
        val = make_fixnum(23456248807424)
#13 0x00005555558467e6 in Fapply (nargs=3, args=0x7fffffffcaa0) at eval.c:2503
        i = 140737488341264
        funcall_nargs = 93825002346080
        funcall_args = 0x0
        spread_arg = XIL(0)
        fun = XIL(0x7b60)
        sa_avail = 16384
        sa_count = {
          bytes = 224
        }
        numargs = 0
        retval = make_fixnum(23456248816954)
#14 0x000055555583aee9 in Fcall_interactively (function=XIL(0x2aaa9c6b88e0), record_flag=XIL(0), keys=XIL(0x7ffff28c2c95)) at callint.c:353
        funval = XIL(0x7ffff25aa495)
        events = 3
        input = XIL(0)
        speccount = {
          bytes = 192
        }
        arg_from_tty = false
        key_count = 3
        record_then_fail = false
        save_this_command = XIL(0x2aaa9c6b88e0)
        save_this_original_command = XIL(0x2aaa9c6b88e0)
        save_real_this_command = XIL(0x2aaa9c6b88e0)
        save_last_command = XIL(0)
        prefix_arg = XIL(0)
        enable = XIL(0)
        up_event = XIL(0)
        form = XIL(0x555555faec23)
        specs = XIL(0)
        sa_avail = 140737488341488
        sa_count = {
          bytes = 140737247297600
        }
        string_len = 0
        string = 0x5555558a92d6 <XSYMBOL+100> "\353\030H\213E\370H\211\307\350\353\376\377\377H\213@\bH\211\307\350(\377\377\377\311\303UH\211\345H\203\354 H\211}\350H\215\025\373\207d"
        string_end = 0x0
        next_event = 0
        nargs = 140737488341536
        args = 0x0
        visargs = 0x555555ef1b00 <lispsym>
        varies = 0x7fffffffca60 "\200\312\377\377\377\177"
        tem = 0x555555ef1b00 <lispsym> "\230\001"
        val = XIL(0x60)
#15 0x0000555555847c56 in funcall_subr (subr=0x555555e628a0 <Scall_interactively>, numargs=3, args=0x7ffff1a1c070) at eval.c:2915
        argbuf = {XIL(0x2aaa9c6b88e0), XIL(0xa0), XIL(0x7fffffffcb60), XIL(0x11558a9f41), XIL(0x555555e628a5), XIL(0x7fffffffcb80), XIL(0x5555558a9ba5), XIL(0x555555e628a5)}
        a = 0x7ffff1a1c070
        fun = XIL(0)
#16 0x00005555558ab4fb in exec_byte_code (fun=XIL(0x7ffff2258ad5), args_template=1025, nargs=1, args=0x7fffffffd1c0) at bytecode.c:809
        call_nargs = 3
        call_fun = XIL(0x555555e628a5)
        count1 = {
          bytes = 160
        }
        template = XIL(0)
        val = XIL(0)
        call_args = 0x7ffff1a1c070
        original_fun = XIL(0x2aaa9c2bc280)
        bytecode = XIL(0x7ffff232cb2d)
        op = 3
        type = CATCHER
        targets =
          {0x5555558afa8f <exec_byte_code+22044>, 0x5555558afabd <exec_byte_code+22090>, 0x5555558afabf <exec_byte_code+22092>, 0x5555558afac1 <exec_byte_code+22094>, 0x5555558afac3 <exec_byte_code+22096>, 0x5555558afac3 <exec_byte_code+22096>, 0x5555558afb40 <exec_byte_code+22221>, 0x5555558afbcf <exec_byte_code+22364>, 0x5555558aaa05 <exec_byte_code+1426>, 0x5555558aaa07 <exec_byte_code+1428>, 0x5555558aaa09 <exec_byte_code+1430>, 0x5555558aaa0b <exec_byte_code+1432>, 0x5555558aaa0d <exec_byte_code+1434>, 0x5555558aaa0d <exec_byte_code+1434>, 0x5555558aaa16 <exec_byte_code+1443>, 0x5555558aa9c2 <exec_byte_code+1359>, 0x5555558aaf11 <exec_byte_code+2718>, 0x5555558aaf13 <exec_byte_code+2720>, 0x5555558aaf15 <exec_byte_code+2722>, 0x5555558aaf17 <exec_byte_code+2724>, 0x5555558aaf19 <exec_byte_code+2726>, 0x5555558aaf19 <exec_byte_code+2726>, 0x5555558aaf63 <exec_byte_code+2800>, 0x5555558aaf22 <exec_byte_code+2735>, 0x5555558ab1bb <exec_byte_code+3400>, 0x5555558ab1bd <exec_byte_code+3402>, 0x5555558ab1bf <exec_byte_code+3404>, 0x5555558ab1c1 <exec_byte_code+3406>, 0x5555558ab1c3 <exec_byte_code+3408>, 0x5555558ab1c3 <exec_byte_code+3408>, 0x5555558ab15a <exec_byte_code+3303>, 0x5555558ab17a <exec_byte_code+3335>, 0x5555558ab2a1 <exec_byte_code+3630>, 0x5555558ab2a3 <exec_byte_code+3632>, 0x5555558ab2a5 <exec_byte_code+3634>, 0x5555558ab2a7 <exec_byte_code+3636>, 0x5555558ab2a9 <exec_byte_code+3638>, 0x5555558ab2a9 <exec_byte_code+3638>, 0x5555558ab240 <exec_byte_code+3533>, 0x5555558ab260 <exec_byte_code+3565>, 0x5555558ab653 <exec_byte_code+4576>, 0x5555558ab655 <exec_byte_code+4578>, 0x5555558ab657 <exec_byte_code+4580>, 0x5555558ab659 <exec_byte_code+4582>, 0x5555558ab65b <exec_byte_code+4584>, 0x5555558ab65b <exec_byte_code+4584>, 0x5555558ab5f2 <exec_byte_code+4479>, 0x5555558ab612 <exec_byte_code+4511>, 0x5555558ac032 <exec_byte_code+7103>, 0x5555558abe52 <exec_byte_code+6623>, 0x5555558abe46 <exec_byte_code+6611>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558ac2d7 <exec_byte_code+7780>, 0x5555558ac42c <exec_byte_code+8121>, 0x5555558ac4ad <exec_byte_code+8250>, 0x5555558ac52f <exec_byte_code+8380>, 0x5555558ac5b0 <exec_byte_code+8509>, 0x5555558aad08 <exec_byte_code+2197>, 0x5555558aadaf <exec_byte_code+2364>, 0x5555558ac64e <exec_byte_code+8667>, 0x5555558aac27 <exec_byte_code+1972>, 0x5555558aae2f <exec_byte_code+2492>, 0x5555558ac6d8 <exec_byte_code+8805>, 0x5555558ac758 <exec_byte_code+8933>, 0x5555558ac7b2 <exec_byte_code+9023>, 0x5555558ac832 <exec_byte_code+9151>, 0x5555558ac8b0 <exec_byte_code+9277>, 0x5555558ac9db <exec_byte_code+9576>, 0x5555558aca35 <exec_byte_code+9666>, 0x5555558acb8b <exec_byte_code+10008>, 0x5555558acd0f <exec_byte_code+10396>, 0x5555558acd69 <exec_byte_code+10486>, 0x5555558acdc3 <exec_byte_code+10576>, 0x5555558ace43 <exec_byte_code+10704>, 0x5555558acec3 <exec_byte_code+10832>, 0x5555558acf43 <exec_byte_code+10960>, 0x5555558acfe6 <exec_byte_code+11123>, 0x5555558ad04d <exec_byte_code+11226>, 0x5555558ad0b4 <exec_byte_code+11329>, 0x5555558ad1ba <exec_byte_code+11591>, 0x5555558ad2c6 <exec_byte_code+11859>, 0x5555558ad3d2 <exec_byte_code+12127>, 0x5555558ad4d2 <exec_byte_code+12383>, 0x5555558ad5e2 <exec_byte_code+12655>, 0x5555558ad6f2 <exec_byte_code+12927>, 0x5555558ad802 <exec_byte_code+13199>, 0x5555558ad912 <exec_byte_code+13471>, 0x5555558ada9a <exec_byte_code+13863>, 0x5555558adbaa <exec_byte_code+14135>, 0x5555558add3b <exec_byte_code+14536>, 0x5555558ade22 <exec_byte_code+14767>, 0x5555558adf09 <exec_byte_code+14998>, 0x5555558ae3fa <exec_byte_code+16263>, 0x5555558abc81 <exec_byte_code+6158>, 0x5555558ae46a <exec_byte_code+16375>, 0x5555558ae4c4 <exec_byte_code+16465>, 0x5555558ae5c2 <exec_byte_code+16719>, 0x5555558ae632 <exec_byte_code+16831>, 0x5555558ae6a2 <exec_byte_code+16943>, 0x5555558ae6fc <exec_byte_code+17033>, 0x5555558ae754 <exec_byte_code+17121>, 0x5555558ae7ac <exec_byte_code+17209>, 0x5555558ae80c <exec_byte_code+17305>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558ae876 <exec_byte_code+17411>, 0x5555558ae8ce <exec_byte_code+17499>, 0x5555558ae926 <exec_byte_code+17587>, 0x5555558ae97e <exec_byte_code+17675>, 0x5555558ae9d6 <exec_byte_code+17763>, 0x5555558aea2e <exec_byte_code+17851>, 0x5555558abc81 <exec_byte_code+6158>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558aea88 <exec_byte_code+17941>, 0x5555558aeaef <exec_byte_code+18044>, 0x5555558aeb49 <exec_byte_code+18134>, 0x5555558aeba3 <exec_byte_code+18224>, 0x5555558aec23 <exec_byte_code+18352>, 0x5555558aeca3 <exec_byte_code+18480>, 0x5555558aecfd <exec_byte_code+18570>, 0x5555558aed57 <exec_byte_code+18660>, 0x5555558aedd7 <exec_byte_code+18788>, 0x5555558aee57 <exec_byte_code+18916>, 0x5555558aeed7 <exec_byte_code+19044>, 0x5555558aef2f <exec_byte_code+19132>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558abb98 <exec_byte_code+5925>, 0x5555558ab6d3 <exec_byte_code+4704>, 0x5555558aab71 <exec_byte_code+1790>, 0x5555558ab7b1 <exec_byte_code+4926>, 0x5555558ab859 <exec_byte_code+5094>, 0x5555558ab8fe <exec_byte_code+5259>, 0x5555558ab9a3 <exec_byte_code+5424>, 0x5555558abb52 <exec_byte_code+5855>, 0x5555558ab0f2 <exec_byte_code+3199>, 0x5555558abc3e <exec_byte_code+6091>, 0x5555558abcc4 <exec_byte_code+6225>, 0x5555558abd67 <exec_byte_code+6388>, 0x5555558abdbc <exec_byte_code+6473>, 0x5555558ac08a <exec_byte_code+7191>, 0x5555558ac119 <exec_byte_code+7334>, 0x5555558ac1bc <exec_byte_code+7497>, 0x5555558ac231 <exec_byte_code+7614>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558aef89 <exec_byte_code+19222>, 0x5555558af02c <exec_byte_code+19385>, 0x5555558af086 <exec_byte_code+19475>, 0x5555558af0e0 <exec_byte_code+19565>, 0x5555558af13a <exec_byte_code+19655>, 0x5555558af194 <exec_byte_code+19745>, 0x5555558af214 <exec_byte_code+19873>, 0x5555558af294 <exec_byte_code+20001>, 0x5555558af314 <exec_byte_code+20129>, 0x5555558af394 <exec_byte_code+20257>, 0x5555558af4fe <exec_byte_code+20619>, 0x5555558af57e <exec_byte_code+20747>, 0x5555558af5fe <exec_byte_code+20875>, 0x5555558af658 <exec_byte_code+20965>, 0x5555558af765 <exec_byte_code+21234>, 0x5555558af872 <exec_byte_code+21503>, 0x5555558af8cc <exec_byte_code+21593>, 0x5555558af926 <exec_byte_code+21683>, 0x5555558ae0c3 <exec_byte_code+15440>, 0x5555558ae283 <exec_byte_code+15888>, 0x5555558af98d <exec_byte_code+21786>, 0x5555558afa0e <exec_byte_code+21915>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558ac93c <exec_byte_code+9417>, 0x5555558ad11b <exec_byte_code+11432>, 0x5555558ae523 <exec_byte_code+16560>, 0x5555558afc85 <exec_byte_code+22546>, 0x5555558afd15 <exec_byte_code+22690>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afdce <exec_byte_code+22875>, 0x5555558afe7f <exec_byte_code+23052>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afa8f <exec_byte_code+22044>, 0x5555558afff2 <exec_byte_code+23423> <repeats 64 times>}
        quitcounter = 1 '\001'
        bc = 0x555555e524b0 <main_thread+496>
        top = 0x7ffff1a1c068
        pc = 0x7ffff292cea0 "\006\a9\203\260"
        bytestr = XIL(0x7ffff22590e4)
        vector = XIL(0x7ffff2258b15)
        maxdepth = make_fixnum(14)
        const_length = 26
        bytestr_length = 179
        vectorp = 0x7ffff2258b18
        max_stack = 14
        frame_base = 0x7ffff1a1c030
        fp = 0x7ffff1a1c0a0
        bytestr_data = 0x7ffff292ce17 "\304\020\211?\205\023"
        rest = false
        mandatory = 1
        nonrest = 4
        pushedargs = 1
        result = XIL(0x55555581b66c)
#17 0x0000555555847fb6 in fetch_and_exec_byte_code (fun=XIL(0x7ffff2258ad5), args_template=1025, nargs=1, args=0x7fffffffd1b8) at eval.c:2960
#18 0x0000555555848445 in funcall_lambda (fun=XIL(0x7ffff2258ad5), nargs=1, arg_vector=0x7fffffffd1b8) at eval.c:3032
        val = XIL(0x4980)
        syms_left = make_fixnum(1025)
        next = XIL(0x55555583d835)
        lexenv = XIL(0x7fffffffd0f0)
        count = {
          bytes = 160
        }
        i = 117405869184
        optional = false
        rest = false
        previous_rest = false
#19 0x0000555555847727 in funcall_general (fun=XIL(0x7ffff2258ad5), numargs=1, args=0x7fffffffd1b8) at eval.c:2823
        original_fun = XIL(0x4980)
#20 0x00005555558479b2 in Ffuncall (nargs=2, args=0x7fffffffd1b0) at eval.c:2873
        count = {
          bytes = 128
        }
        val = make_fixnum(23456248581595)
#21 0x00005555557548b0 in call1 (fn=XIL(0x4980), arg1=XIL(0x2aaa9c6b88e0)) at lisp.h:3218
#22 0x0000555555758185 in command_loop_1 () at keyboard.c:1514
        scount = {
          bytes = 96
        }
        cmd = XIL(0x2aaa9c6b88e0)
        keybuf =
          {XIL(0x555555faf143), XIL(0x2aaa9c2bf5e8), XIL(0x2aaa9c6b88e0), XIL(0), XIL(0), XIL(0x555555ef1b00), XIL(0x7fffffffd260), XIL(0x55555583d7dc), XIL(0x7fffffffd270), XIL(0), XIL(0x7fffffffd290), XIL(0x55555583d835), XIL(0x7fffffffd2e0), XIL(0x555555ef1b00), XIL(0), XIL(0), XIL(0x7fffffffd2b0), XIL(0x60), XIL(0x7fffffffd2b0), XIL(0x555555e522c0), XIL(0x7fffffffd2f0), XIL(0x5555558438c9), XIL(0x100000000), XIL(0x90), XIL(0x7fffffffd2f0), XIL(0x555555feda40), XIL(0x7fffffffd320), XIL(0x90), XIL(0x7fffffffd320), XIL(0x5555558437b8)}
        i = 3
        prev_modiff = 9
        prev_buffer = 0x7ffff21a3708
        already_adjusted = false
#23 0x000055555584336f in internal_condition_case (bfun=0x5555557578a1 <command_loop_1>, handlers=XIL(0x90), hfun=0x555555756cdb <cmd_error>) at eval.c:1450
        val = XIL(0x7fffffffd380)
        c = 0x555555feda40
#24 0x000055555575748a in command_loop_2 (handlers=XIL(0x90)) at keyboard.c:1142
        val = XIL(0xf480)
#25 0x0000555555842540 in internal_catch (tag=XIL(0xf480), func=0x555555757463 <command_loop_2>, arg=XIL(0x90)) at eval.c:1180
        val = make_fixnum(23456248581616)
        c = 0x555555f35600
#26 0x000055555575741f in command_loop () at keyboard.c:1120
#27 0x000055555575679e in recursive_edit_1 () at keyboard.c:729
        count = {
          bytes = 32
        }
        val = XIL(0x555555849975)
#28 0x00005555557569bb in Frecursive_edit () at keyboard.c:812
        count = {
          bytes = 0
        }
        buffer = XIL(0)
#29 0x0000555555751fc6 in main (argc=2, argv=0x7fffffffd698) at emacs.c:2474
        stack_bottom_variable = 0x7ffff5fe03c0
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x0
        original_pwd = 0x0
        dump_mode = 0x0
        skip_args = 0
        temacs = 0x0
        attempt_load_pdump = true
        rlim = {
          rlim_cur = 10022912,
          rlim_max = 18446744073709551615
        }
        lc_all = 0x7fffffffeda7 ""
        sockfd = -1
        module_assertions = false
Cannot access memory at address 0x7fffff2076af
(gdb) xbacktrace
Cannot access memory at address 0x7fffff2076af
(gdb)

> Thanks.  Unfortunately, I still can't reproduce the crash.

It does not crash for you?

Further info: This is on an up-to-date debian/bullseye installation.

Thanks for your attention, Gregor