https://gcc.gnu.org/bugzilla/show_bug.cgi?id=93318
--- Comment #1 from Jan Hubicka <hubicka at gcc dot gnu.org> --- So it seems the problem is the following: Program received signal SIGSEGV, Segmentation fault. 0x0000000000a1ff0e in cgraph_edge::speculative_call_info (this=0x7ffff6e26bc8, direct=@0x7fffffffd700: 0x90c070 <_start>, indirect=@0x7fffffffd6f8: 0x7fffffffd740, reference=@0x7fffffffd6f0: 0x3c94d50) at ../../gcc/cgraph.c:1137 1137 e2->call_stmt != e->call_stmt || e2->lto_stmt_uid != e->lto_stmt_uid; (gdb) p e->call-stmt No symbol "stmt" in current context. (gdb) p e $1 = (cgraph_edge *) 0x7ffff6e26bc8 (gdb) p e2 $2 = (cgraph_edge *) 0x0 (gdb) p e->caller->debug () _ZN2js8frontend12FunctionTree16visitRecursivelyEP9JSContextPNS0_10ParserBaseEPFbS5_PS1_E/35640856 (visitRecursively) @0x7ffff5ea7ca8 Type: function definition analyzed Visibility: public visibility_specified visibility:hidden References: _ZZN2js8frontend10ParserBase24publishDeferredFunctionsEPNS0_12FunctionTreeEENUlPS1_S3_E_4_FUNES4_S3_.lto_priv.0/33954802 (addr) (speculative) Referring: Function visitRecursively/35640856 is inline copy in publishDeferredItems/33218091 Clone of _ZN2js8frontend12FunctionTree16visitRecursivelyEP9JSContextPNS0_10ParserBaseEPFbS5_PS1_E/33948009 Availability: local Unit id: 2276 Function flags: count:2174 (guessed) first_run:4520 body local Called by: _ZN2js8frontend10ParserBase20publishDeferredItemsEPNS0_12FunctionTreeE/33218091 (inlined) (2174 (guessed),1.00 per call) Calls: _ZZN2js8frontend10ParserBase24publishDeferredFunctionsEPNS0_12FunctionTreeEENUlPS1_S3_E_4_FUNES4_S3_.lto_priv.0/35640861 (speculative) (inlined) (indirect_inlining) (1558 (guessed),0.72 per call) __builtin_expect/10953 (2078 (guessed),0.96 per call) __builtin_expect/10953 (2078 (guessed),0.96 per call) _ZN2js28RunningWithTrustedPrincipalsEP9JSContext/32911428 (0 (precise),0.00 per call) __builtin_expect/10953 (0 (precise),0.00 per call) _ZN2js18ReportOverRecursedEP9JSContext/33263266 (0 (precise),0.00 per call) _ZN2js8frontend12FunctionTree16visitRecursivelyEP9JSContextPNS0_10ParserBaseEPFbS5_PS1_E/33948009 (0 (precise),0.00 per call) _ZZN2js8frontend10ParserBase24publishDeferredFunctionsEPNS0_12FunctionTreeEENUlPS1_S3_E_4_FUNES4_S3_.lto_priv.0/35640859 (speculative) (inlined) (543 (guessed),0.25 per call) We have two speculative calls direct edges: 1)_ZZN2js8frontend10ParserBase24publishDeferredFunctionsEPNS0_12FunctionTreeEENUlPS1_S3_E_4_FUNES4_S3_.lto_priv.0/35640861 (speculative) (inlined) 2) _ZZN2js8frontend10ParserBase24publishDeferredFunctionsEPNS0_12FunctionTreeEENUlPS1_S3_E_4_FUNES4_S3_.lto_priv.0/35640859 (speculative) (inlined) (543 (guessed),0.25 per call) and one speculative reference, but no indirect call.